flarehawk.com
Flarehawk is a security operations platform that ingests telemetry from tools such as edge, gateway, and application sources, groups suspicious activity into incidents, and helps teams investigate and remediate issues. It also provides analytics, logs, and asset- and incident-oriented workflows for monitored organizations.
flarehawk.com exposes an OAuth-protected HTTP API at https://app.flarehawk.com with an OpenAPI spec, plus a streamable-HTTP MCP server at https://app.flarehawk.com/mcp; no GraphQL API or CLI was found.
- Flarehawk MCP Serverdetected
- Flarehawk HTTP APIdiscovered
Sign in to the Flarehawk app. The public API contract states customer API operations require Authorization: Bearer <key>, and the OAuth-protected-resource metadata says Flarehawk accepts bearer tokens in the header. Flarehawk also exposes OAuth 2.0 endpoints at authorize, token, and dynamic client registration; for MCP, a compatible client can typically register automatically and then have the user approve access for scopes such as mcp:connect, assets:read, incidents:read, analytics:read, and logs:read.
Point your MCP client at the server URL and approve access in the browser. The server supports OAuth Dynamic Client Registration (RFC 7591), so the client registers itself automatically — no developer-portal app, client_id, or client_secret to create.
conventions · 4/8 published
- integrations.json✗
/.well-known/integrations.json - llms.txt✓https://flarehawk.com/llms.txt
- API catalog✓https://flarehawk.com/.well-known/api-catalog
- OpenAPI document✗
/api/schema/, /openapi.json, /swagger.json, /api/openapi.json, or /v1/openapi.json - MCP server card✗
/.well-known/mcp/server-card.json - OAuth protected resource✓https://flarehawk.com/.well-known/oauth-protected-resource
- Agent card✗
/.well-known/agent-card.json - Agent skills✓https://flarehawk.com/.well-known/agent-skills/index.json
Publish these signals → /publishing