# Claude Code

Add Lockpick to Claude Code so it can check your site and fix what Lockpick found in your repository.

Connecting an assistant lets it check your sites, read your reports and help you fix what Lockpick found, using your own Lockpick account. It never runs a scanner itself. It asks Lockpick, which runs the same limited, read-only checks as the web app.

## Connect Claude Code

Choose one. Both add the same server, named `lockpick`, so you only need one of them.

### Option A, hosted (recommended)

Run this, then `/mcp` in Claude Code to sign in.

```
claude mcp add --transport http lockpick https://mcp.lockpick.app/mcp
```

### Option B, local through the CLI

Sign in from your terminal, the window where developers type commands. You approve it in your browser.

```
npx lockpicks login --host https://www.lockpick.app
```

Then run this in the project you want fixed.

```
claude mcp add --env LOCKPICK_HOST=https://www.lockpick.app --transport stdio lockpick -- npx -y lockpicks mcp
```

A Lockpick plugin for Claude Code is coming soon. Until it opens, connect with one of the options above and ask in your own words.

## Try it

Once it's connected, ask something like this.

```text title="Prompt"
Use Lockpick to check my site and explain the most important fix in plain words.
```

[Prompts that work well](/docs/ai/prompts) has more, and [permissions](/docs/mcp/permissions) explains what the assistant can and can't do.