superagent_

// get started

Quickstart

Create an account, connect GitHub, and connect Superagent to your coding agent. Three steps, no new workflows.

You already work in your coding agent and GitHub, so that is where Superagent works too: no new workflows or tools to learn. This page walks through the three steps to cover your repos from first prompt to production.

1. Create your account

Sign in to the Superagent dashboard. Your account is where you connect repos, manage API keys, and invite your team. Everything is scoped to an organization, and you can belong to several.

2. Connect to GitHub

From Integrations, install the Superagent Security GitHub App on the repositories you want covered. During installation, choose Only select repositories and pick your repos.

From the next pull request on, Superagent checks every PR: security scan and contributor trust on open and update, plus a supply chain scan whenever dependencies change. Results land as inline comments and check runs on the PR itself. See PR Scans for what each check does.

If your project accepts outside contributions and needs contributor license agreements, also install Open CLA. Install GitHub Apps covers both apps in detail.

3. Connect Superagent to your agent

Install the Superagent skill, then ask your coding agent to connect:

npx skills add superagent-ai/skills --skill superagent

The skill guides Cursor, Claude Code, Codex CLI, and other MCP clients through API key setup, shows the proposed configuration before changing it, and verifies the connection. The docs overview explains the complete flow.

You can also configure the server manually at https://www.superagent.sh/mcp. Client specific configuration is in the MCP server guide.

Once connected, ask your agent things like "list the unresolved high risk findings" or "start a red team report on this repo" without leaving your editor.

What happens next

  • Every pull request on a connected repo gets scanned before merge.
  • Start your first red-team engagement from Red team: repository, Web app, agent, or model. See Red Team.
  • Triage what comes back in Findings, and turn confirmed issues into fix PRs.

Next steps