How to Use the Black Duck (Synopsys) MCP in Vercel AI SDK

Q: Can I stream live vulnerability data from Black Duck (Synopsys) to a Next.js frontend using Vercel AI SDK?

Yes. By combining streamText with listvulnerabilities, security findings render in your UI as they are parsed, avoiding blank screens and spinners.

Q: How does the Black Duck (Synopsys) MCP Server handle authentication in Vercel AI SDK?

You configure the authProvider during client setup to handle OAuth tokens securely. Vinkius manages the endpoint authentication, so your edge functions only need one token.

Q: Can I search projects without blocking the main UI thread?

Yes. Use searchprojects inside your edge configuration. The non-blocking nature of the Vercel AI SDK means search results display immediately.

Feed real-time Black Duck security audits and vulnerability checks straight to your Next.js UI using the Vercel AI SDK.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect Black Duck (Synopsys) MCP to Vercel AI SDK

Create your Vinkius account to connect Black Duck (Synopsys) to Vercel AI SDK and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup Black Duck (Synopsys) with Vercel AI SDK

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Live BOM Status Streaming with Vercel AI SDK

This MCP Server connects your streaming frontend to security metadata by exposing the `get_bom_status` tool directly to your generative UI. Instead of making your users wait for a slow API pull, the server reads the current calculation state and pushes updates live. You build the interface using `streamText` to render components as the data arrives. The SDK handles the connection, meaning you can display active project versions via `list_project_versions` without writing custom polling logic.

Instant Vulnerability Lookups

Your user-facing agent can immediately fetch security risks using `get_vulnerability_details` when a developer asks about a specific CVE. The Vercel AI SDK handles the raw JSON payload and formats it on the fly. By calling `list_vulnerabilities` inside your edge route, you bypass heavy backend middleware. This setup keeps your bundle size small while giving users direct access to their security posture.

Interactive Policy Rule Audits

Give your developers the power to check compliance rules by exposing `list_policy_rules` to your interactive chat interface. The model executes the tool, gets the active rules, and displays them inside a clean UI component. You initialize the connection with `createMCPClient` and pass the tools to your model configuration. When the session ends, call `mcpClient.close()` to clean up edge resources.

Setup guide

Set up Black Duck (Synopsys) MCP in Vercel AI SDK

Prerequisites

Node.js 18+ and a TypeScript project
ai + @modelcontextprotocol/sdk packages
Active Vinkius subscription with a valid endpoint token

1

Install dependencies

Run npm install ai @modelcontextprotocol/sdk plus your preferred model provider (e.g. @ai-sdk/openai).
2

Create the Streamable HTTP transport

Use StreamableHTTPClientTransport with your Vinkius endpoint URL. Replace [YOUR_TOKEN_HERE] with your token from cloud.vinkius.com.
3

Discover and use tools

Call mcpClient.tools() to auto-discover all Black Duck (Synopsys) tools. Pass them directly to generateText() or streamText() — no manual schema definitions needed.
4

Works with any model provider

Swap openai("gpt-4o") for any AI SDK provider — Anthropic, Google, Mistral. The MCP tools work identically across all supported models.

index.ts

import { experimental_createMCPClient as createMCPClient } from "ai";
import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp";
import { generateText } from "ai";
import { openai } from "@ai-sdk/openai";

const transport = new StreamableHTTPClientTransport(
  new URL("https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp")
);

const mcpClient = await createMCPClient({ transport });
const tools = await mcpClient.tools();

const { text } = await generateText({
  model: openai("gpt-4o"),
  tools,
  prompt: "List recent Black Duck (Synopsys) transactions",
});

console.log(text);
await mcpClient.close();

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Black Duck (Synopsys). All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect Black Duck (Synopsys) now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about Black Duck (Synopsys) MCP in Vercel AI SDK

Install the required packages, initialize the MCP client using the Vinkius HTTP URL, and pass the tools to `streamText`. Don't forget to call `mcpClient.close()` when your session finishes to clean up connections.

Yes. By combining `streamText` with `list_vulnerabilities`, security findings render in your UI as they are parsed, avoiding blank screens and spinners.

You configure the `authProvider` during client setup to handle OAuth tokens securely. Vinkius manages the endpoint authentication, so your edge functions only need one token.

Yes. Use `search_projects` inside your edge configuration. The non-blocking nature of the Vercel AI SDK means search results display immediately.

This server reads Black Duck project names, vulnerability lists, policy rules, and BOM statuses. Vinkius runs the server in a zero-trust, isolated sandbox, meaning your proprietary code and API tokens never leak to the public LLM provider.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript