Create, list, and delete scan targets — the MCP servers, platforms, or endpoints that security tests run against.
Commands
qai targets list
List all configured targets.
Displays a table with Name, Type, URI, and ID for each target.
qai targets create
Create a new scan target.
qai targets create --name <NAME> --type <TYPE> [--uri <URI>]
| Option | Description |
|---|
--name | Human-readable name for the target. |
--type | Target type: server (MCP server) or platform (agentic platform). |
--uri | Connection endpoint (optional). |
qai targets delete
Delete a scan target.
qai targets delete <ID> [--yes]
| Argument | Description |
|---|
ID | Target ID. Supports partial IDs (first 8+ characters). |
| Option | Description |
|---|
--yes | Skip confirmation prompt. |
- Removes the target from the database
- Associated runs are orphaned (their
target_id is set to NULL)
- Runs, findings, and evidence are not deleted
Examples:
# Delete with confirmation
qai targets delete a1b2c3d4
# Output:
# Delete target 'My Test Server'? Associated runs will be unlinked. [y/N]: y
# Deleted target 'My Test Server'. 2 runs unlinked.
# Delete without confirmation
qai targets delete a1b2c3d4 --yes
# Output:
# Deleted target 'My Test Server'. 0 runs unlinked.
# Using partial ID (8+ characters)
qai targets delete a1b2c3d4e5f6 --yes
# Works with just: qai targets delete a1b2c3d4 --yes
Partial ID matching requires at least 8 characters and must be unambiguous. If multiple targets match, you’ll be prompted to use a longer prefix.