Your dashboard in Claude Code

FondateurMode exposes an MCP (Model Context Protocol) server. Once connected to Claude Code, you can query your reports in plain language and generate a dashboard on demand. Available on Pro and Business plans.

1. Add the server

In a terminal where Claude Code is installed:

claude mcp add --transport http fondateurmode https://fondateurmode.com/api/mcp \
  --header "Authorization: Bearer GS-XXXXX-XXXXX-XXXXX-XXXXX"

Add --scope user to make it available in all your projects.

To share the setup with your team in a committed .mcp.json, without writing the key in it:

{
  "mcpServers": {
    "fondateurmode": {
      "type": "http",
      "url": "https://fondateurmode.com/api/mcp",
      "headers": { "Authorization": "Bearer ${FONDATEURMODE_KEY}" }
    }
  }
}

Each team member then sets the FONDATEURMODE_KEY environment variable.

2. Check

In Claude Code, type /mcp: fondateurmode should show as connected.

3. Generate the dashboard

/mcp__fondateurmode__security-dashboard

Claude fetches your data and creates security-dashboard.html: threat level, attacks per day, CPU, RAM and disk, vulnerable versions, license status.

You can also ask questions:

• "Which servers have critical vulnerable versions?"
• "Compare this week's attacks with last week."
• "How many days are left on my license?"

Available tools

The MCP server is read-only: it cannot change anything on your servers.

What about ChatGPT?

The same MCP server will soon be available in ChatGPT.

Application technologies, versions and vulnerabilities

The agent inventories the server on which it is installed: system binary versions and application/dependency versions found in package.json, package-lock.json, requirements.txt, composer.lock and Gemfile.lock. The dashboard shows the application/location, technology, version and result: vulnerability detected, no known vulnerability in OSV, or not checked. A manifest or locked version does not prove the running version. An unavailable check never means a package is safe. The table includes major technologies and flagged dependencies; coverage limits are displayed.

Application directories must be included in app_paths in the server’s private configuration. Dependency, build and backup directories are excluded when searching for manifests. Archive a fresh report without sending notifications:

sudo fondateurmode report --no-notify

Run the antivirus against configured scan_paths:

sudo fondateurmode scan
sudo fondateurmode status

Results distinguish completed scans from unavailable engines, errors and timeouts. Files are not automatically deleted. No third-party commercial antivirus is required; Imunify360 is optional.

Report calendar and downloads

Ask Claude Code: “Use FondateurMode to regenerate my dashboard with the latest reports, application technologies and the report archive calendar for 2026.” Replace the year as needed. Claude must load every page of report_archive for the selected year.

In Calendrier des rapports (Report calendar), choose Jour (Day), Mois (Month) or Année (Year), then select the period. Télécharger le rapport HTML downloads a readable, printable report; use your browser’s Print menu to save it as PDF. Télécharger les données JSON downloads structured data.

A day exports that server’s latest report for the day. A month or year exports the latest report for each available day. Dates use UTC. Missing collection days are never invented. When no reports are loaded for a selected period, the buttons are disabled with an explanation. Older reports may not include the technology inventory.

The HTML is a local snapshot with no license key and no network requests. Regenerate it to add new reports or load another year. Downloaded reports contain server security information; share them with the intended people only.