Introduction

Rustine finds the leaks in your site or your GitHub repository, gives you a score out of 100 and, for each issue, a fix ready to paste into your coding agent. Everything the app does, you can do from here:

• The REST API (https://api.rustine.io/v1) for your scripts, your CI, n8n or Make: scan after a deploy, block a release when a critical issue shows up, recheck after a fix.
• The MCP server (https://mcp.rustine.io) for your agent: Claude, ChatGPT, Claude Code, Cursor or VS Code call Rustine themselves, and check before telling you “done”.

Where to start

1. First call in 2 minutes: a key, one curl command, your first answer.
2. Authentication: where the key goes (never in the address).
3. The API reference: every route, its parameters and its samples in curl, Node and Python.

Your agent prefers MCP? Go straight to Connect your agent.

What Rustine does not do

Rustine only scans the sites of your projects, read-only. A full audit only runs on a site you proved is yours: the law forbids testing a site you do not control. And Rustine never touches your code: the fix is text, your agent or you apply it.

For agents

Every page exists in Markdown at the same address followed by .md. /llms.txt is the index, /en/llms-full.txt all the docs in one file, and /openapi.json the API specification.