---
title: ToolRouter — Agent Use Case Guide
description: Step-by-step guide for completing a task with a specific AI agent using ToolRouter.
url: https://toolrouter.com/tools/pentest/use-cases/check-sql-injection/claude
---
# How to Check SQL Injection with Claude

Claude transforms penetration testing into a conversational security review where each discovered vulnerability leads to deeper investigation. Ask Claude to scan your application, explain each finding in context, chain additional targeted tests based on initial results, and generate remediation code for every issue found. Its analytical depth is ideal for security-conscious developers who want to understand not just what is vulnerable but why and how to fix it permanently.

## Setup

claude mcp add toolrouter -- npx -y toolrouter-mcp

## Steps

1. Connect ToolRouter: claude mcp add toolrouter -- npx -y toolrouter-mcp
2. Ask Claude: "Test this application for SQL injection vulnerabilities using pentest" and provide the target URL
3. Claude runs test_injection with SQL payloads against input fields and parameters
4. Review which inputs are vulnerable and what type of injection is possible
5. Fix vulnerable queries with parameterized statements and re-test

## Example Prompt

```
Test https://staging.myapp.com for SQL injection vulnerabilities. Check all form fields, URL parameters, and API endpoints that interact with the database.
```

## Tips

- Ask Claude to test both GET and POST parameters for injection
- Request specific parameterized query examples to fix each vulnerable endpoint
- Test with different database backends if your app uses multiple databases
