Bolt

Bolt is a browser-based AI app builder. MCP servers are added as Connectors from your account settings, and Perfai Cloud connects as a remote streamable-http server.

Bolt’s Connectors are account-level, not per-project. Once added, perfai-cloud is available in every Bolt project unless you leave Auto-enable for all projects off and enable it per project instead.

Generate your Bearer token

The value Bolt needs is a Perfai Token (id_token which is a JWT)

id_tokens are short-lived. If Bolt later reports a connector failure after previously working, your token has likely expired — generate a fresh one with either method below and update the connector.

macOS / Linux
Windows (PowerShell)

read -s -p "PerfAI password: " PERFAI_PASSWORD; echo
curl -s -X POST "https://api.perfai.ai/api/v1/auth/token" \
  -H "Content-Type: application/json" \
  -d "{\"username\":\"you@example.com\",\"password\":\"$PERFAI_PASSWORD\"}" \
  | grep -o '"id_token":"[^"]*"' | cut -d'"' -f4

read -s masks the password prompt so it never lands in your shell history. Copy the printed id_token value in full.

$cred = Get-Credential -UserName "you@example.com" -Message "PerfAI password"
$body = @{ username = $cred.UserName; password = $cred.GetNetworkCredential().Password } | ConvertTo-Json
$resp = Invoke-RestMethod -Uri "https://api.perfai.ai/api/v1/auth/token" -Method Post -Body $body -ContentType "application/json"
$resp.id_token

Get-Credential masks the password prompt and, unlike a plain double-quoted string, won’t let PowerShell mangle special characters ($, `, ") in your password. Copy the printed id_token value in full.

Copy the resulting string — you’ll paste it into Bolt’s connector form as the API key value, exactly as-is (no further encoding).

Installation

From the Bolt homepage, click the + icon in the chatbox.
Click Connectors, then Manage connectors — this opens the Connectors (MCP) page in your account settings.
Click Add custom connector.
Fill in:
- Server URL: https://mcp-server.perfai.ai/mcp
- Transport: Streamable HTTP
- Authentication: API Key
- API Key: paste the id_token from above
Save. Decide whether to auto-enable this connector for all projects or turn it on per project.

Verify the server is connected

Open Manage connectors again and find perfai-cloud in your connector list.
It should show as connected with 19 tools discovered.
If it fails, re-check the API Key value for trailing whitespace, and make sure the token hasn’t expired (generate a fresh id_token if it has).

The prompts below run inside Bolt’s chat, not your terminal. The only setup step outside the chat is adding the connector above.

In a Bolt project chat, with the connector enabled, type:

Login to Perfai

This calls login with no arguments. Confirm the session with:

What's my Perfai auth status?

Register an app and run a scan

Register https://your-app.example.com with Perfai

Check the onboarding status for that app

Run a security test on the selected app

Show me the vulnerabilities it found

Fix and verify

Generate an auto-fix plan for all critical and high findings

Mark vulnerability 3 as fixed

Give me the fix summary

Getting Started

Core Concepts

Hybrid Deployment

Changelog

Generate your Bearer token

Installation

Verify the server is connected

Register an app and run a scan

Fix and verify

​Generate your Bearer token

​Installation

​Verify the server is connected

​Login

​Register an app and run a scan

​Fix and verify

Generate your Bearer token

Installation

Verify the server is connected

Login

Register an app and run a scan

Fix and verify