How to Use the HCL AppScan MCP in Vercel AI SDK

Stream vulnerability data directly into your Vercel AI SDK interface for real-time security visibility.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect HCL AppScan MCP to Vercel AI SDK

Create your Vinkius account to connect HCL AppScan to Vercel AI SDK and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup HCL AppScan with Vercel AI SDK

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Live security feedback in your UI

Your AI client pushes scan results directly to the frontend. You see vulnerabilities appear as they are discovered using `list_issues`. Stop waiting for reports to generate. Your users get immediate visibility into their application security status without leaving your dashboard.

Trigger scans from your edge functions

Initiate DAST assessments on demand via `start_dast_scan`. The HCL AppScan MCP Server handles the handshake while your app stays responsive. Everything happens in the background. Your code processes the status updates and error states returned by the API during the execution flow.

Audit application health in real-time

Fetch precise details on any app in your inventory using `get_app`. You get the context needed to make informed security decisions immediately. Connect the data to your UI components for an interactive experience. Your agent provides the necessary depth for developers to fix bugs before they deploy.

Setup guide

Set up HCL AppScan MCP in Vercel AI SDK

Prerequisites

Node.js 18+ and a TypeScript project
ai + @modelcontextprotocol/sdk packages
Active Vinkius subscription with a valid endpoint token

1

Install dependencies

Run npm install ai @modelcontextprotocol/sdk plus your preferred model provider (e.g. @ai-sdk/openai).
2

Create the Streamable HTTP transport

Use StreamableHTTPClientTransport with your Vinkius endpoint URL. Replace [YOUR_TOKEN_HERE] with your token from cloud.vinkius.com.
3

Discover and use tools

Call mcpClient.tools() to auto-discover all HCL AppScan tools. Pass them directly to generateText() or streamText() — no manual schema definitions needed.
4

Works with any model provider

Swap openai("gpt-4o") for any AI SDK provider — Anthropic, Google, Mistral. The MCP tools work identically across all supported models.

index.ts

import { experimental_createMCPClient as createMCPClient } from "ai";
import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp";
import { generateText } from "ai";
import { openai } from "@ai-sdk/openai";

const transport = new StreamableHTTPClientTransport(
  new URL("https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp")
);

const mcpClient = await createMCPClient({ transport });
const tools = await mcpClient.tools();

const { text } = await generateText({
  model: openai("gpt-4o"),
  tools,
  prompt: "List recent HCL AppScan transactions",
});

console.log(text);
await mcpClient.close();

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by HCL AppScan. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect HCL AppScan now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about HCL AppScan MCP in Vercel AI SDK

Install the required packages and initialize the client using your Vinkius endpoint. You then pass the server tools into your streamText function.

Yes, you should implement a polling loop or a background worker. Use the `get_scan` tool to check for completion status while the UI remains interactive.

It does. Ensure your environment variables are configured correctly for the HTTP transport so the connection remains stable during execution.

The server only transmits data between the AppScan cloud and your client. No vulnerability details or scan metadata are cached on Vinkius infrastructure.

Filter the tool list manually before passing them to your agent. This ensures your AI client only interacts with the specific endpoints you permit.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python