How to Use the Veracode MCP in Cline

Q: How do I list Veracode applications using Cline?

Use listapplications. This fetches the globally unique GUID for all your Veracode AppSec Applications. You'll need these IDs to target specific resources later in your scripts.

Q: Can I get vulnerability details for Veracode using Cline?

Yes, call getfindingdetails. This pinpoints the vulnerability type (CWE), the source file, and the code path. It’s perfect for writing targeted fix scripts.

Q: If I need to manage users or scans with Veracode using Cline, which tools do I use?

You can list authorized identity users with listveracodeusers. To check DAST scans, run listdynamicanalyses, and for sandboxes, call listsandboxes.

Execute full DevSecOps cycles in Cline: Analyze Veracode flaws without leaving your terminal workflow.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect Veracode MCP to Cline

Create your Vinkius account to connect Veracode to Cline and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup Veracode with Cline

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Track App Security Status

The `get_application_details` tool lets you pull a detailed profile of any Veracode application. You get the compliance policy status, business criticality rating, deployment state, and all the risk scores in one shot. If you need to manage app containers, you can use `create_application` by providing the schema and profile name as a JSON string.

Analyze Specific Code Flaws

When you call `get_finding_details`, it explains vulnerabilities down to the type (CWE), affected source file, code path, and what you need to do about it. It’s hyper-specific. Need a comprehensive view of all security flaws? The `list_security_findings` tool retrieves unified findings for an application so you don't miss anything.

Manage AppSec Resources

You can list every Veracode AppSec Application using `list_applications`. These structural entities give a globally unique GUID required for sub-resource lookups, which is critical when scripting. Furthermore, the server lets you check the connection status with `get_api_health`, making sure your end-to-end task execution doesn't fail because of an API hiccup.

Setup guide

Set up Veracode MCP in Cline

Prerequisites

VS Code with Cline extension installed
Active Vinkius subscription with a valid endpoint token

1

Open Cline MCP settings

Click the Cline icon in the VS Code sidebar to open the Cline panel. Then click the MCP Servers icon (server stack) at the top-right corner of the panel.
2

Add a remote server

Click "Remote Servers" at the top, then click "Add Remote MCP". In the Name field, type veracode-mcp. In the URL field, paste your Vinkius endpoint: https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp. Get your token from cloud.vinkius.com.
3

Enable the server

After saving, the server appears in the Cline MCP panel. Toggle the switch to enable it. The status indicator turns green when the connection is live.
4

Start using tools

Return to the Cline chat and ask: "Check my latest Veracode refund status." Cline will discover the available tools and request your approval before invoking each one — giving you full control over every action.

Cline MCP Settings

{
  "mcpServers": {
    "veracode-mcp": {
      "url": "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    }
  }
}

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Veracode. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect Veracode now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about Veracode MCP in Cline

Use `list_applications`. This fetches the globally unique GUID for all your Veracode AppSec Applications. You'll need these IDs to target specific resources later in your scripts.

It provides a lot: the app's Veracode compliance policy status, its business criticality rating, its deployment state, and all associated risk scores. It’s great for pre-commit checks.

Yes, call `get_finding_details`. This pinpoints the vulnerability type (CWE), the source file, and the code path. It’s perfect for writing targeted fix scripts.

You can list authorized identity users with `list_veracode_users`. To check DAST scans, run `list_dynamic_analyses`, and for sandboxes, call `list_sandboxes`.

This server handles AppSec Application GUIDs, vulnerability types (CWE), and access control roles. Be careful with the sensitivity of the resource IDs you're passing around.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript