How to Use the Veracode MCP in Vercel AI SDK

Q: Can I see Veracode's compliance status using Vercel AI SDK?

Yes. The getapplicationdetails tool gives you the full picture, including the application's current Veracode compliance policy status and its business criticality rating.

Q: Does Veracode support listing apps in Vercel AI SDK?

Absolutely. The listapplications tool returns a global GUID for every app, which is crucial if you need to reference that application later when checking details or finding vulnerabilities.

Q: What kind of data privacy considerations exist with Veracode and Vercel AI SDK?

This server primarily handles metadata related to application profile status, such as risk scores, deployment state, and the list of security findings. No sensitive source code is passed through this endpoint.

Show real-time security scan results in your frontend with Vercel AI SDK.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect Veracode MCP to Vercel AI SDK

Create your Vinkius account to connect Veracode to Vercel AI SDK and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup Veracode with Vercel AI SDK

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Stream App Security Profiles to Your UI

The `get_application_details` tool retrieves a Veracode application's compliance policy, business criticality rating, and risk score. Since results stream directly into the UI via Vercel AI SDK, users see this detailed information appear in real-time, eliminating loading spinners. You can also track all configured Dynamic Analysis (DAST) scans using `list_dynamic_analyses`. This makes building live dashboards simple; your agent fetches data and streams updates as they arrive.

Pinpoint Code Vulnerabilities in Real Time

Need to show a user exactly where a flaw is? The `get_finding_details` tool pulls the vulnerability type (CWE), affected source file, and specific code path. With Vercel AI SDK, this data streams instantly into your React or Next.js component. It also gives remediation guidance right out of the box. You can process a list of findings via `list_security_findings` and stream actionable advice to the user as they interact with your product.

Manage App Structure On Demand

Managing app containers is straightforward. Use `create_application` when you need a new Veracode profile container, or use `delete_application` if the profile is retired. The SDK handles these actions as API calls, showing immediate confirmation. Furthermore, listing all apps with `list_applications` provides the unique GUIDs needed to keep your front-end state accurate. This makes building a reliable application inventory page fast.

Setup guide

Set up Veracode MCP in Vercel AI SDK

Prerequisites

Node.js 18+ and a TypeScript project
ai + @modelcontextprotocol/sdk packages
Active Vinkius subscription with a valid endpoint token

1

Install dependencies

Run npm install ai @modelcontextprotocol/sdk plus your preferred model provider (e.g. @ai-sdk/openai).
2

Create the Streamable HTTP transport

Use StreamableHTTPClientTransport with your Vinkius endpoint URL. Replace [YOUR_TOKEN_HERE] with your token from cloud.vinkius.com.
3

Discover and use tools

Call mcpClient.tools() to auto-discover all Veracode tools. Pass them directly to generateText() or streamText() — no manual schema definitions needed.
4

Works with any model provider

Swap openai("gpt-4o") for any AI SDK provider — Anthropic, Google, Mistral. The MCP tools work identically across all supported models.

index.ts

import { experimental_createMCPClient as createMCPClient } from "ai";
import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp";
import { generateText } from "ai";
import { openai } from "@ai-sdk/openai";

const transport = new StreamableHTTPClientTransport(
  new URL("https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp")
);

const mcpClient = await createMCPClient({ transport });
const tools = await mcpClient.tools();

const { text } = await generateText({
  model: openai("gpt-4o"),
  tools,
  prompt: "List recent Veracode transactions",
});

console.log(text);
await mcpClient.close();

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Veracode. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect Veracode now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about Veracode MCP in Vercel AI SDK

The MCP Server exposes all 10 tools to your agent client. When you call an action, the results stream back through the Vercel AI SDK connection, allowing you to display data like risk scores or CWE types live in your UI.

Yes. The `get_application_details` tool gives you the full picture, including the application's current Veracode compliance policy status and its business criticality rating.

This MCP Server touches security findings, application profiles, and user role management. Specifically, you're working with the `list_veracode_users` tool to manage RBAC roles.

Absolutely. The `list_applications` tool returns a global GUID for every app, which is crucial if you need to reference that application later when checking details or finding vulnerabilities.

This server primarily handles metadata related to `application profile status`, such as risk scores, deployment state, and the list of security findings. No sensitive source code is passed through this endpoint.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript