# {q-AI} Documentation
> Security testing for MCP servers and agentic AI systems

## Pages

### Getting Started

- [Introduction](https://docs.q-uestionable.ai/introduction): Security testing for MCP servers and agentic AI systems
- [Quickstart](https://docs.q-uestionable.ai/quickstart): Install q-ai and run your first MCP server security assessment
- [Core Concepts](https://docs.q-uestionable.ai/concepts): MCP protocol, OWASP mapping, module methodologies, and threat model
- [Responsible Use](https://docs.q-uestionable.ai/responsible-use): Authorized use requirements and responsible disclosure
- [Changelog](https://docs.q-uestionable.ai/changelog): Release history for the q-ai platform

### Web UI

- [Web UI Overview](https://docs.q-uestionable.ai/web-ui/overview): Browser-based interface for managing workflows, viewing results, and configuring the platform
- [Launcher](https://docs.q-uestionable.ai/web-ui/launcher): Interactive workflow forms for running assessments and tests
- [Runs](https://docs.q-uestionable.ai/web-ui/runs): View workflow results, findings, and historical runs
- [Settings](https://docs.q-uestionable.ai/web-ui/settings): Configure providers, defaults, and MCP infrastructure

### Audit

- [Overview](https://docs.q-uestionable.ai/audit/overview): Automated MCP server security scanning mapped to OWASP MCP Top 10, MITRE ATLAS, CWE, and OWASP Agentic Top 10
- [Audit CLI Reference](https://docs.q-uestionable.ai/audit/cli): Command reference for qai audit
- [Scanner Catalog](https://docs.q-uestionable.ai/audit/scanners): Security scanners mapped to OWASP MCP Top 10 categories
- [Framework Coverage](https://docs.q-uestionable.ai/audit/framework-coverage): How q-ai findings map to OWASP MCP Top 10, OWASP Agentic Top 10, MITRE ATLAS, and CWE
- [SARIF Output](https://docs.q-uestionable.ai/audit/sarif-output): SARIF 2.1.0 report format and GitHub Code Scanning integration
- [Test Fixtures](https://docs.q-uestionable.ai/audit/fixtures): Intentionally vulnerable MCP servers for scanner validation and testing

### Inject

- [Overview](https://docs.q-uestionable.ai/inject/overview): Tool poisoning and prompt injection testing against LLM-powered agents
- [Inject CLI Reference](https://docs.q-uestionable.ai/inject/cli): Commands for tool poisoning and injection campaigns
- [Payload Catalog](https://docs.q-uestionable.ai/inject/payloads): Injection payload templates and format reference
- [Campaign Execution](https://docs.q-uestionable.ai/inject/campaigns): Running and analyzing injection campaigns against LLM models

### Proxy

- [Proxy Overview](https://docs.q-uestionable.ai/proxy/overview): Intercept, inspect, and replay MCP traffic for security testing and regression analysis
- [Proxy CLI Commands](https://docs.q-uestionable.ai/proxy/cli): Command reference for starting, replaying, exporting, and inspecting MCP sessions
- [Live Interception](https://docs.q-uestionable.ai/proxy/intercept): Pause, inspect, and modify MCP messages in flight using intercept mode
- [Session Replay](https://docs.q-uestionable.ai/proxy/replay): Re-send captured MCP messages against a live server for testing and validation
- [Session Export & Structure](https://docs.q-uestionable.ai/proxy/session-export): Understand session file format and export captured MCP traffic

### Chain

- [Chain Overview](https://docs.q-uestionable.ai/chain/overview): Compose multi-step attack chains to test complex vulnerabilities across agent architectures
- [Chain CLI Commands](https://docs.q-uestionable.ai/chain/cli): Run, validate, and analyze attack chains from the command line
- [Chain Templates & YAML Format](https://docs.q-uestionable.ai/chain/templates): Define attack chains in YAML and use built-in templates

### IPI — Indirect Prompt Injection

- [Overview](https://docs.q-uestionable.ai/ipi/overview): Test AI agent indirect prompt injection vulnerabilities through document poisoning and callback tracking
- [IPI CLI Reference](https://docs.q-uestionable.ai/ipi/cli): Command reference for qai ipi
- [Hiding Techniques](https://docs.q-uestionable.ai/ipi/techniques): 34 document hiding techniques across 7 formats
- [Document Formats](https://docs.q-uestionable.ai/ipi/formats): PDF, Image, Markdown, HTML, DOCX, ICS, and EML payload generation
- [Payload Styles & Types](https://docs.q-uestionable.ai/ipi/payloads): 7 payload styles x 7 payload types — callback, exfil, SSRF, and more
- [Callback Verification](https://docs.q-uestionable.ai/ipi/callbacks): Authenticated callbacks with confidence scoring for proof of execution
- [Deployment Playbook](https://docs.q-uestionable.ai/ipi/deployment-playbook): Guided workflow from payload generation through campaign monitoring

### CXP — Context File Poisoning

- [CXP Overview](https://docs.q-uestionable.ai/cxp/overview): Understand coding assistant instruction poisoning and how to test for vulnerabilities
- [CXP CLI Reference](https://docs.q-uestionable.ai/cxp/cli): Command-line interface for coding assistant poisoning tests
- [CXP Objectives](https://docs.q-uestionable.ai/cxp/objectives): Test scenarios for coding assistant instruction poisoning
- [Assistant Formats](https://docs.q-uestionable.ai/cxp/assistant-formats): Supported coding assistant instruction file formats
- [CXP Validation](https://docs.q-uestionable.ai/cxp/validation): Validate whether generated code contains injected instructions
- [CXP Deployment Playbook](https://docs.q-uestionable.ai/cxp/deployment-playbook): Guided workflow for deploying and interpreting context file poisoning tests

### RXP — RAG Retrieval Poisoning

- [RXP Overview](https://docs.q-uestionable.ai/rxp/overview): Measure and validate RAG retrieval poisoning vulnerabilities
- [RXP CLI Reference](https://docs.q-uestionable.ai/rxp/cli): Command-line interface for RAG retrieval poisoning validation
- [Models and Profiles](https://docs.q-uestionable.ai/rxp/models-profiles): Embedding models and domain profiles for retrieval poisoning validation
- [Interpretive Bands](https://docs.q-uestionable.ai/rxp/interpretive-bands): Severity thresholds for retrieval poisoning results

### Exports & Integrations

- [JSON Bundle Export](https://docs.q-uestionable.ai/exports/json-schema): Complete run export in the run-bundle-v1 schema
- [SARIF Export](https://docs.q-uestionable.ai/exports/sarif): SARIF 2.1.0 output for GitHub Code Scanning and CI/CD integration
- [NDJSON Export](https://docs.q-uestionable.ai/exports/ndjson): Newline-delimited JSON for streaming processing and log aggregation
- [CSV Export](https://docs.q-uestionable.ai/exports/csv): Flat spreadsheet export with one row per finding
- [DefectDojo Integration](https://docs.q-uestionable.ai/integrations/defectdojo): Import qai audit findings into DefectDojo for centralized vulnerability management
- [GitHub Security Integration](https://docs.q-uestionable.ai/integrations/github-security): Surface qai findings in GitHub Code Scanning via SARIF upload

### Configuration

- [LLM Provider Configuration](https://docs.q-uestionable.ai/config/providers): Configure LLM providers and credentials for injection campaigns and chain execution
- [MCP Transport Types](https://docs.q-uestionable.ai/config/transports): Configure how qai connects to MCP servers
- [Callback Server Configuration](https://docs.q-uestionable.ai/config/callback-server): Configure IPI callback listener and bridge token authentication
- [Dangerous Payloads Configuration](https://docs.q-uestionable.ai/config/dangerous-payloads): Control access to high-risk payload injection types with the --dangerous flag
- [Environment Variables](https://docs.q-uestionable.ai/config/environment-variables): Environment variables recognized by qai

### Architecture

- [Platform Overview](https://docs.q-uestionable.ai/architecture/overview): Architectural design and module organization of the qai platform
- [Core Infrastructure](https://docs.q-uestionable.ai/architecture/core): Database schema, configuration system, and shared data models
- [Audit Module Architecture](https://docs.q-uestionable.ai/architecture/audit-module): Scanner pipeline, MCP connection, and multi-format reporting
- [Proxy Module Architecture](https://docs.q-uestionable.ai/architecture/proxy-module): MCP traffic interception, session recording, and replay
- [Inject Module Architecture](https://docs.q-uestionable.ai/architecture/inject-module): Multi-provider campaign execution, response normalization, and scoring
- [Chain Module Architecture](https://docs.q-uestionable.ai/architecture/chain-module): Attack chain definitions, execution, blast radius, and detection rules
- [IPI Module Architecture](https://docs.q-uestionable.ai/architecture/ipi-module): Document generation, callback tracking, and deployment playbooks
- [CXP Module Architecture](https://docs.q-uestionable.ai/architecture/cxp-module): Context file poisoning for coding assistants
- [RXP Module Architecture](https://docs.q-uestionable.ai/architecture/rxp-module): RAG retrieval poisoning measurement and validation
