How to Use the Checkmarx MCP in Cline

Q: How does Cline run a Checkmarx scan from VS Code?

Cline uses the runscan tool to trigger a new security analysis on your active project. It monitors the status in real-time, letting you know the moment the results are ready to be reviewed.

Q: Can Cline fix Checkmarx findings automatically?

Yes. Cline retrieves the vulnerability details using getscanresults and calls listbfl to find the optimal patch location. It then edits your local files to resolve the security issues.

Q: How does the Checkmarx MCP Server handle Infrastructure as Code files in Cline?

Cline invokes getkicsresults to fetch security findings specifically for Terraform, Kubernetes, and Dockerfiles. It then rewrites those configuration files to eliminate the flagged misconfigurations.

Q: Can I view my Checkmarx application portfolios inside Cline?

Yes. Cline calls listapplications to show you the high-level risk metrics and security posture across all microservices grouped under your Checkmarx One applications.

Give Cline the power to run Checkmarx scans, analyze SAST results, and write secure code fixes using this MCP Server.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect Checkmarx MCP to Cline

Create your Vinkius account to connect Checkmarx to Cline and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup Checkmarx with Cline

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Hands-free vulnerability patching with Cline

When Cline finds a security flaw, it doesn't just write a generic fix. The agent uses `get_scan_results` to download the precise vulnerability details, including the exact lines of code and the specific threat severity. It reads the context of your local files to understand the underlying logic. Once it has the data, Cline queries `list_bfl` to locate the single point in your code graph that resolves the vulnerability. It then writes the code, applies the patch, and runs local tests to verify your application still compiles.

Continuous AppSec monitoring inside VS Code

Keep your codebase secure without leaving your editor. Cline connects to your Checkmarx workspace using `list_projects` and `get_project` to align with the correct branch. It then fires off new scans with `run_scan` whenever you complete a major task. While the scan runs, Cline tracks its progress using `get_scan_details`. If the scan fails or flags urgent issues, Cline alerts you in the sidebar and immediately starts drafting the necessary security patches.

Fix IaC templates with this MCP Server

Securing cloud infrastructure shouldn't be a manual chore. Cline uses `get_kics_results` to instantly pull specialized Infrastructure as Code findings for your Terraform, CloudFormation, and Kubernetes manifests. Instead of forcing you to decipher complex policy violations, the agent modifies your Dockerfiles and YAML configurations directly. It replaces insecure defaults with hardened settings, keeping your deployment pipelines clean.

Setup guide

Set up Checkmarx MCP in Cline

Prerequisites

VS Code with Cline extension installed
Active Vinkius subscription with a valid endpoint token

1

Open Cline MCP settings

Click the Cline icon in the VS Code sidebar to open the Cline panel. Then click the MCP Servers icon (server stack) at the top-right corner of the panel.
2

Add a remote server

Click "Remote Servers" at the top, then click "Add Remote MCP". In the Name field, type checkmarx-mcp. In the URL field, paste your Vinkius endpoint: https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp. Get your token from cloud.vinkius.com.
3

Enable the server

After saving, the server appears in the Cline MCP panel. Toggle the switch to enable it. The status indicator turns green when the connection is live.
4

Start using tools

Return to the Cline chat and ask: "Check my latest Checkmarx refund status." Cline will discover the available tools and request your approval before invoking each one — giving you full control over every action.

Cline MCP Settings

{
  "mcpServers": {
    "checkmarx-mcp": {
      "url": "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    }
  }
}

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Checkmarx. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect Checkmarx now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about Checkmarx MCP in Cline

Cline uses the `run_scan` tool to trigger a new security analysis on your active project. It monitors the status in real-time, letting you know the moment the results are ready to be reviewed.

Yes. Cline retrieves the vulnerability details using `get_scan_results` and calls `list_bfl` to find the optimal patch location. It then edits your local files to resolve the security issues.

Cline invokes `get_kics_results` to fetch security findings specifically for Terraform, Kubernetes, and Dockerfiles. It then rewrites those configuration files to eliminate the flagged misconfigurations.

Yes. Cline calls `list_applications` to show you the high-level risk metrics and security posture across all microservices grouped under your Checkmarx One applications.

No, your source code never leaves your local machine or your secure Checkmarx One environment. The MCP Server acts as a local proxy, retrieving only vulnerability definitions and scan metadata to let Cline execute fixes.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript