# Other MCP apps

Any assistant that supports remote MCP servers with sign-in can use Lockpick.

Connecting an assistant lets it check your sites, read your reports and help you fix what Lockpick found, using your own Lockpick account. It never runs a scanner itself. It asks Lockpick, which runs the same limited, read-only checks as the web app.

## Connect your app

Add this address to your assistant as a remote MCP server. MCP is how AI assistants connect to tools like Lockpick. Look for a setting called connectors, tools or MCP servers.

```
https://mcp.lockpick.app/mcp
```

Sign in from your terminal, the window where developers type commands. You approve it in your browser.

```
npx lockpicks login --host https://www.lockpick.app
```

Then have your assistant start this command as a local MCP server.

```
LOCKPICK_HOST=https://www.lockpick.app npx -y lockpicks mcp
```

Your app needs to support remote MCP servers over HTTP and sign-in with OAuth. It signs you in through your browser and never sees your password. [The hosted server](/docs/mcp/hosted-server) has the technical details.

## Try it

Once it's connected, ask something like this.

```text title="Prompt"
Use Lockpick to check my site and explain the most important fix in plain words.
```

[Prompts that work well](/docs/ai/prompts) has more, and [permissions](/docs/mcp/permissions) explains what the assistant can and can't do.