The security platform, documented end to end.
Guides, subsystem references, and MCP interfaces for Sonar and the services around it — from target inventory and distributed workflow execution to reading a one-time code out of your inbox.
Products & services
Pick what you are documenting.
Organized from product to subsystem to the smallest useful concept. New products appear here as they ship.
Private security-scan orchestration: a shared target inventory, an AI-assisted resolution pipeline, and a DAG-based engine that runs recon workflows across distributed workers.
MailServiceReceive-only mail for the platform domain with an MCP read surface — so an agent can pick up the verification or one-time-code emails a recon flow triggers. Nothing sends mail.
Evidence and reporting. Documentation lands here when the product ships.
What the platform gives you
Built for recon at scale.
One shared inventory
Domains, IPs, ports, http paths, and technologies live in a single canonical asset graph — attributed, deduplicated, and reused across every scan.
Distributed workflow engine
Author workflows as a DAG of steps; the runtime materialises tasks, fans them out to workers, and recovers from stalls without duplicating work.
MCP-native
Every capability is exposed to agents through a profile-gated Model Context Protocol surface — read inventory, run bounded recon, or read inbound mail.
Fail-closed by design
Profiles intersect tiers with an explicit tool allow-list. Hiding a tool reduces the surface; the backend policy stays authoritative.
Quick start
Connect an agent in one command.
Every surface speaks MCP over authenticated Streamable HTTP. Point a client at the endpoint with its bearer token and start calling tools.
MCP connection guide# add the Sonar MCP to Claude Code claude mcp add --transport http sonar \ https://mcp.astrixion.ai/mcp \ --header "Authorization: Bearer <TOKEN>" # or read inbound mail claude mcp add --transport http mail \ https://mail.astrixion.ai/mcp \ --header "Authorization: Bearer <TOKEN>"