How do I get my AppScan API Key ID and Secret?

Log in to the AppScan on Cloud console, go to your **User Profile** (top right), and select **API Keys**. You can generate a new Key ID and Key Secret there.

Does this server support the EU region?

Yes, you can configure the `APPSCAN_REGION` environment variable to `eu` to connect to the European data center (`eu.cloud.appscan.com`).

Can I start a scan for an internal application?

Yes, provided you have an AppScan Presence (local agent) configured. You can use the `list_presence` tool to check their availability before starting a scan.

HCL AppScan MCP Server for Pydantic AI 10 tools — connect in under 2 minutes

Name: HCL AppScan
Availability: InStock
Author: Vinkius

ai.pydantic.dev/mcp

Built by Vinkius GDPR 10 Tools SDK

Pydantic AI brings type-safe agent development to Python with first-class MCP support. Connect HCL AppScan through the Vinkius and every tool is automatically validated against Pydantic schemas — catch errors at build time, not in production.

Get MCP Server for AI Agents

ASK AI ABOUT THIS MCP SERVER

Open in ChatGPT Open in Claude Open in Perplexity

Vinkius supports streamable HTTP and SSE.

python

import asyncio
from pydantic_ai import Agent
from pydantic_ai.mcp import MCPServerHTTP

async def main():
    # Your Vinkius token — get it at cloud.vinkius.com
    server = MCPServerHTTP(url="https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp")

    agent = Agent(
        model="openai:gpt-4o",
        mcp_servers=[server],
        system_prompt=(
            "You are an assistant with access to HCL AppScan "
            "(10 tools)."
        ),
    )

    result = await agent.run(
        "What tools are available in HCL AppScan?"
    )
    print(result.data)

asyncio.run(main())

Fully ManagedVinkius Servers

60%Token savings

High SecurityEnterprise-grade

IAMAccess control

EU AI ActCompliant

DLPData protection

V8 IsolateSandboxed

Ed25519Audit chain

<40msKill switch

Stream every event to Splunk, Datadog, or your own webhook in real-time

* Every MCP server runs on Vinkius-managed infrastructure inside AWS - a purpose-built runtime with per-request V8 isolates, Ed25519 signed audit chains, and sub-40ms cold starts optimized for native MCP execution. See our infrastructure

About HCL AppScan MCP Server

The HCL AppScan MCP Server brings powerful application security testing capabilities directly to your AI agent. Seamlessly manage your security posture by monitoring vulnerabilities, tracking scan progress, and auditing your application inventory across HCL AppScan on Cloud (ASoC).

Pydantic AI validates every HCL AppScan tool response against typed schemas, catching data inconsistencies at build time. Connect 10 tools through the Vinkius and switch between OpenAI, Anthropic, or Gemini without changing your integration code — full type safety, structured output guarantees, and dependency injection for testable agents.

Key Features

Inventory Management — List and search for applications in your security inventory to find their unique IDs.
Vulnerability Tracking — Retrieve detailed lists of security issues found during scans, including severity and status.
Scan Oversight — Monitor all performed scans and check the real-time status of active security tests.
Dynamic Analysis (DAST) — Start new DAST scans for your web applications directly from your chat interface.
Agent & Presence Monitoring — List available Presences (local agents) used for scanning internal applications.
Real-time Insights — Get instant summaries of your security findings and prioritize remediation efforts.

The HCL AppScan MCP Server exposes 10 tools through the Vinkius. Connect it to Pydantic AI in under two minutes — no API keys to rotate, no infrastructure to provision, no vendor lock-in. Your configuration, your data, your control.

How to Connect HCL AppScan to Pydantic AI via MCP

Follow these steps to integrate the HCL AppScan MCP Server with Pydantic AI.

Install Pydantic AI

Run pip install pydantic-ai

Replace the token

Replace [YOUR_TOKEN_HERE] with your Vinkius token

Run the agent

Save to agent.py and run: python agent.py

Explore tools

The agent discovers 10 tools from HCL AppScan with type-safe schemas

Why Use Pydantic AI with the HCL AppScan MCP Server

Pydantic AI provides unique advantages when paired with HCL AppScan through the Model Context Protocol.

Full type safety: every MCP tool response is validated against Pydantic models, catching data inconsistencies before they reach your application

Model-agnostic architecture — switch between OpenAI, Anthropic, or Gemini without changing your HCL AppScan integration code

Structured output guarantee: Pydantic AI ensures tool results conform to defined schemas, eliminating runtime type errors

Dependency injection system cleanly separates your HCL AppScan connection logic from agent behavior for testable, maintainable code

HCL AppScan + Pydantic AI Use Cases

Practical scenarios where Pydantic AI combined with the HCL AppScan MCP Server delivers measurable value.

Type-safe data pipelines: query HCL AppScan with guaranteed response schemas, feeding validated data into downstream processing

API orchestration: chain multiple HCL AppScan tool calls with Pydantic validation at each step to ensure data integrity end-to-end

Production monitoring: build validated alert agents that query HCL AppScan and output structured, schema-compliant notifications

Testing and QA: use Pydantic AI's dependency injection to mock HCL AppScan responses and write comprehensive agent tests

HCL AppScan MCP Tools for Pydantic AI (10)

These 10 tools become available when you connect HCL AppScan to Pydantic AI via MCP:

get_account_check

Verify AppScan account connection

get_account_info

Retrieve authenticated user information

get_app

Get details for a specific application

get_issue

Get detailed information about a specific vulnerability

get_scan

Get details and status for a specific scan

list_apps

List all applications in your AppScan inventory

list_issues

List vulnerabilities found for a specific application

list_presence

List AppScan Presences (local agents)

list_scans

List all scans performed in the account

start_dast_scan

Start a new Dynamic Analysis (DAST) scan

Example Prompts for HCL AppScan in Pydantic AI

Ready-to-use prompts you can give your Pydantic AI agent to start working with HCL AppScan immediately.

"List all applications in my AppScan inventory."

"Show me high severity issues for application 'Customer Portal'."

"Start a new DAST scan for appId '12345' with URL 'https://portal.example.com'."

Troubleshooting HCL AppScan MCP Server with Pydantic AI

Common issues when connecting HCL AppScan to Pydantic AI through the Vinkius, and how to resolve them.

MCPServerHTTP not found

Update: pip install --upgrade pydantic-ai

HCL AppScan + Pydantic AI FAQ

Common questions about integrating HCL AppScan MCP Server with Pydantic AI.

How does Pydantic AI discover MCP tools?

Create an MCPServerHTTP instance with the server URL. Pydantic AI connects, discovers all tools, and generates typed Python interfaces automatically.

Does Pydantic AI validate MCP tool responses?

Yes. When you define result types as Pydantic models, every tool response is validated against the schema. Invalid data raises a clear error instead of silently corrupting your pipeline.

Can I switch LLM providers without changing MCP code?

Absolutely. Pydantic AI abstracts the model layer — your HCL AppScan MCP integration works identically with OpenAI, Anthropic, Google, or any supported provider.