How to Use the Black Duck (Synopsys) MCP in Windsurf

Q: How do I connect the Black Duck (Synopsys) MCP Server to Windsurf?

Open your /.codeium/windsurf/mcpconfig.json file and add the server configuration under the mcpServers key. You can also configure it directly in the Windsurf Settings panel under Cascade MCP Servers.

Q: How does the Black Duck (Synopsys) MCP Server handle project searches in Windsurf?

It queries your compliance database using searchprojects to find matches. Cascade uses this data to filter down to the exact project version you are currently working on.

Q: Can I list all users assigned to a project using Cascade?

Yes. Cascade can run listusers to see who has access to your compliance dashboard, helping you verify project ownership during audits.

Get live security alerts and BOM status in Windsurf while Cascade writes and refactors your code.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect Black Duck (Synopsys) MCP to Windsurf

Create your Vinkius account to connect Black Duck (Synopsys) to Windsurf and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup Black Duck (Synopsys) with Windsurf

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Run security checks inside Windsurf

By calling `search_projects`, Cascade can locate your target repository and pull the exact compliance data you need. It then uses `list_vulnerabilities` to find active threats without you copying CVE lists manually. When Cascade finds a vulnerability, it doesn't just stop there. It reads the CVE details using `get_vulnerability_details` to understand the exploit vector, then writes the fix and updates your dependencies.

Track Bill of Materials with Cascade

Checking the progress of your security scans is simple when Cascade runs `get_bom_status`. The agent checks the status of your Bill of Materials calculation and notifies you the second it finishes. The agent queries your code repositories via `list_code_locations` to map your local files to remote scan paths. This lets you confirm that your local environment matches the exact bill of materials registered in your compliance dashboard.

Enforce compliance rules with this MCP Server

When checking security rules, Cascade queries `list_policy_rules` to ensure your dependency updates align with company standards. It runs these checks in real time so you don't push broken builds. If a policy violation pops up, Cascade can immediately search for alternative packages. It uses `list_project_versions` to find clean releases of your dependencies that won't trigger compliance alerts.

Setup guide

Set up Black Duck (Synopsys) MCP in Windsurf

Prerequisites

Windsurf IDE installed (macOS, Windows, or Linux)
Active Vinkius subscription with a valid endpoint token

1

Open MCP configuration

Click the Cascade assistant icon in the sidebar, then click the hammer icon (🔨) at the top of the panel. Select "Configure" to open ~/.codeium/windsurf/mcp_config.json.
2

Add the Black Duck (Synopsys) MCP

Paste the JSON snippet shown on the right into the mcpServers object. Replace [YOUR_TOKEN_HERE] with your endpoint token from cloud.vinkius.com.
3

Refresh MCPs

Go back to the hammer icon (🔨) in Cascade and click "Refresh". Windsurf will detect the new server. No full restart is needed — the connection is hot-reloaded.
4

Verify in Cascade

Start a new Cascade conversation and ask something like "Show my Black Duck (Synopsys) payment history." If connected, Cascade will call the Black Duck (Synopsys) tools directly. You will see a green dot next to the server name in the MCP panel.

mcp_config.json

{
  "mcpServers": {
    "black-duck-synopsys-mcp": {
      "url": "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    }
  }
}

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Black Duck (Synopsys). All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect Black Duck (Synopsys) now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about Black Duck (Synopsys) MCP in Windsurf

Open your `~/.codeium/windsurf/mcp_config.json` file and add the server configuration under the mcpServers key. You can also configure it directly in the Windsurf Settings panel under Cascade MCP Servers.

Yes, Cascade can chain actions to fix security flaws. It pulls vulnerability data via `get_vulnerability_details` and then edits your local files to upgrade the package.

It queries your compliance database using `search_projects` to find matches. Cascade uses this data to filter down to the exact project version you are currently working on.

Yes. Cascade can run `list_users` to see who has access to your compliance dashboard, helping you verify project ownership during audits.

This server only handles metadata like CVE IDs, project names, and policy rules. Your actual source code never leaves your local machine, and all API communication goes directly to your private Black Duck instance.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript