How to Use the Veracode MCP in Claude

Q: What if I need to delete an app container using Veracode and Claude Desktop?

You can use the deleteapplication tool. Just a heads up: this action is irreversible, so make sure you're absolutely certain before running it.

Q: Does Veracode support RBAC when using Claude Desktop?

Yes, you can manage roles with listveracodeusers. This tool helps your agent check who has access to the application profiles and what permissions they actually have.

Q: How do I list all security findings for Veracode using Claude Desktop?

Use listsecurityfindings to retrieve a unified view of all security flaws for an application. This is the go-to command when you need one big report on current vulnerabilities.

Run AppSec checks locally and analyze code flaws right from your Claude Desktop agent.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect Veracode MCP to Claude Desktop

Create your Vinkius account to connect Veracode to Claude Desktop and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup Veracode with Claude Desktop

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Check application health status with the MCP Server.

The `get_api_health` tool confirms that Veracode is connected and ready to work. You can run this first to make sure your agent has access before diving into complex scans.

Get a deep dive on specific code flaws.

Need details on one vulnerability? Call `get_finding_details` with the necessary information. This function shows you the CWE type, exactly which file caused the issue, and what path led to it.

Manage applications across your team.

`list_applications` gives you a list of all Veracode AppSec Applications using their unique GUIDs. This is crucial because almost every other function needs that ID to target the right container.

Setup guide

Set up Veracode MCP in Claude Web or Desktop

1

Open Claude Settings

Go to claude.ai, click your profile icon, then navigate to Customize → Connectors.
2

Add Custom Connector

Click the "+" button and select Add custom connector. Paste your Vinkius endpoint URL: https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp Replace [YOUR_TOKEN_HERE] with your token from cloud.vinkius.com. For OAuth-protected servers, expand Advanced settings to add credentials.
3

Start a conversation

Open a new chat. The Veracode MCP tools are available immediately — no restart needed.

Endpoint URL

https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp

No configuration file needed — paste the URL directly in the Claude web interface.

Available on Free (1 connector), Pro, Max, Team, and Enterprise plans.

Prerequisites

Claude Desktop installed (macOS or Windows)
Active Vinkius subscription with a valid endpoint token

1

Open Claude Desktop Settings

Click the menu icon at the top-left corner, go to Settings → Developer → Edit Config. This opens claude_desktop_config.json in your default text editor.
2

Paste the Veracode MCP configuration

Copy the JSON snippet on the right into the mcpServers object. Replace [YOUR_TOKEN_HERE] with your endpoint token from cloud.vinkius.com.
3

Restart Claude Desktop

Close and reopen the application. Claude needs a full restart to load new MCPs — refreshing a conversation is not enough.
4

Verify the connection

Open a new conversation. Click the 🔌 icon at the bottom of the message input. You should see tools listed under veracode-mcp.

json

{
  "mcpServers": {
    "veracode-mcp": {
      "url": "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    }
  }
}

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Veracode. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect Veracode now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about Veracode MCP in Claude Desktop

Your local agent uses the MCP Server to talk directly to Veracode's APIs. It reads data about flaws and application profiles, letting you analyze source code issues conversationally without leaving your desktop environment.

You can use the `delete_application` tool. Just a heads up: this action is irreversible, so make sure you're absolutely certain before running it.

Yes, you can manage roles with `list_veracode_users`. This tool helps your agent check who has access to the application profiles and what permissions they actually have.

Use `list_security_findings` to retrieve a unified view of all security flaws for an application. This is the go-to command when you need one big report on current vulnerabilities.

This server handles application profiles, vulnerability details (CWE), and globally unique GUIDs for applications. It manages sensitive security posture data.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript