LM Studio

LM Studio runs local models and can also act as an MCP host. It supports remote MCP servers through an mcp.json file, edited from the Program tab and Perfai MCP is a remote server.

LM Studio’s own model is local and free to run — but tool-calling against an 18-tool MCP server needs a model that’s actually capable of structured tool use. Small quantized models can fail to respond at all.

Generate your Bearer token

Run this in your own terminal — substitute your Perfai email and password:

macOS / Linux
Windows (PowerShell)

echo -n "you@example.com:yourpassword" | base64

[Convert]::ToBase64String([Text.Encoding]::UTF8.GetBytes("you@example.com:yourpassword"))

Copy the resulting string — you’ll paste it into mcp.json as Bearer <base64>.

Installation

Open LM Studio and go to Developer → Local Server.
Click the Program tab.
This opens (or lets you edit) mcp.json. Add the following:

{
  "mcpServers": {
    "perfai-cloud": {
      "url": "https://mcp-server.perfai.ai/mcp",
      "headers": { "Authorization": "Bearer <base64>" }
    }
  }
}

Save the file. LM Studio reconnects to configured MCP servers automatically.

Verify the server is connected

In the Program tab, check that perfai-cloud shows as connected with 18 tools listed.
If it fails to connect, re-check the Authorization header value and confirm there’s no trailing whitespace in the base64 string.

A successful connection here only means LM Studio can see the server’s tools — it doesn’t guarantee your local model can actually call them.

The prompts below run inside LM Studio’s chat, not your terminal. The only file-based step is editing mcp.json.

In LM Studio’s chat, type:

Login to Perfai

This calls login with no arguments, which opens a browser to Perfai’s own login page. Confirm the session with:

What's my Perfai auth status?

Register an app and run a scan

Register https://your-app.example.com with Perfai

Check the onboarding status for that app

Run a security test on the selected app

Show me the vulnerabilities it found

Fix and verify

Generate an auto-fix plan for all critical and high findings

Mark vulnerability 3 as fixed

Give me the fix summary

Getting Started

Core Concepts

Hybrid Deployment

Changelog

Generate your Bearer token

Installation

Verify the server is connected

Register an app and run a scan

Fix and verify

​Generate your Bearer token

​Installation

​Verify the server is connected

​Login

​Register an app and run a scan

​Fix and verify

Generate your Bearer token

Installation

Verify the server is connected

Login

Register an app and run a scan

Fix and verify