How to Use the Checkmarx MCP in OpenAI Agents SDK

Q: Does Checkmarx expose scan results to OpenAI Agents SDK?

Yes. Your agent uses getscanresults to retrieve the exact line numbers and vulnerability states once a scan finishes.

Secure your build pipeline by connecting the Checkmarx MCP Server to your OpenAI Agents SDK production deployment.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect Checkmarx MCP to OpenAI Agents SDK

Create your Vinkius account to connect Checkmarx to OpenAI Agents SDK and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup Checkmarx with OpenAI Agents SDK

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Trigger and monitor scans with OpenAI Agents SDK

Stop manual security checks. Your agent uses `run_scan` to initiate security analysis directly from your CI/CD flow, and `list_scans` to track the job status. It handles workflow interruptions by calling `cancel_scan` if a developer pushes new code while a job is still running. This keeps your agent pipeline moving without wasting compute time.

Pinpoint flaws using OpenAI Agents SDK

Deep dive into your codebase by using `get_scan_results` to extract vulnerability data. Your agent parses severity and file locations to prioritize what needs fixing. Need to know how to fix it? The agent calls `list_bfl` with the specific rule ID to find the best fix location. It keeps your team focused on the most critical security issues.

Manage infrastructure security for OpenAI Agents SDK

Don't just scan source code; look at your IaC files too. Your agent executes `get_kics_results` to flag misconfigurations in your Terraform and Docker setups. Aggregated metrics are easy to grab with `list_applications` and `list_projects`. Your agent maintains a clear picture of your security posture across multiple microservices.

Setup guide

Set up Checkmarx MCP in OpenAI Agents SDK

Prerequisites

Python 3.10+ installed
openai-agents package (pip install openai-agents)
Active Vinkius subscription with a valid endpoint token

1

Install the SDK

Run pip install openai-agents to install the OpenAI Agents SDK. The MCP integration is built-in — no extra dependencies needed.
2

Connect via SSE transport

Use MCPServerSse with your Vinkius endpoint URL. Replace [YOUR_TOKEN_HERE] with your token from cloud.vinkius.com. The SDK auto-discovers all Checkmarx tools at runtime.
3

Create your Agent

Pass the MCP to Agent(mcp_servers=[server]). The agent receives Checkmarx tools as native definitions — JSON schemas resolve automatically.
4

Run the agent

Call Runner.run(agent, prompt) to execute. The agent invokes the appropriate Checkmarx tools and returns structured results. Copy the full example on the right to get started.

agent.py

import asyncio
from agents import Agent, Runner
from agents.mcp import MCPServerSse

async def main():
    async with MCPServerSse(
        url="https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    ) as server:
        agent = Agent(
            name="Checkmarx Agent",
            instructions="You have access to Checkmarx tools.",
            mcp_servers=[server],
        )
        result = await Runner.run(agent, "List recent transactions")
        print(result.final_output)

asyncio.run(main())

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Checkmarx. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect Checkmarx now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about Checkmarx MCP in OpenAI Agents SDK

Use the MCPServerStreamableHttp class to point the agent at the server URL. Pass the result into the mcp_servers list within your Agent constructor to enable auto-discovery.

Yes. Your agent uses `get_scan_results` to retrieve the exact line numbers and vulnerability states once a scan finishes.

Absolutely. If your agent detects a new commit, it triggers `cancel_scan` to drop the current job and start a fresh one.

The server only touches your security scan metadata and vulnerability reports. It does not store your raw source code files.

Yes. Because the agent validates tool output against your defined constraints, it ensures that security data is handled correctly before any action occurs.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript