How do I connect my Black Duck instance?

You provide your Black Duck Instance URL and API Token through the Vinkius interface to establish the connection.

Which AI clients can I use with this MCP?

You can use any MCP-compatible client, including Claude, Cursor, and Windsurf.

Can I check for CVEs using my AI agent?

Yes, you can use the agent to list vulnerabilities for project versions or get specific details on a CVE.

Does this MCP handle license compliance?

Yes, it allows you to monitor Bill of Materials (BOM) status and audit security policy rules.

Where is my data stored?

Vinkius hosts the MCP and manages the connection to your Black Duck instance using the credentials you provide.

Can I check for critical vulnerabilities in a specific project version?

Yes! Use the list_vulnerabilities capability with the Project and Version IDs. Your agent will fetch the list of components with known security flaws and their severity levels.

How do I know if my Black Duck scan is finished?

Simply ask the agent to get_bom_status for the specific project version. It will return the current calculation status, showing if the BOM is 'Up to date' or still processing.

What happens if I trigger API rate limits?

Black Duck limits connections to 100 requests per 10 seconds or 10,000 per 30 minutes. If you exceed this sustained load protection, you will temporarily receive a HTTP 429 error code restricting your IP for 15 minutes.

An astronaut overseeing a futuristic data hub

Download PDF Markdown Version

Connect Black Duck (Synopsys) to ChatGPT, Claude and Gemini

Set it up once and it works in ChatGPT, Claude, Cursor, and any other client you love. It all runs safely in the background, so you can relax and focus on what really matters. Manage open source security and compliance via your AI agent.

Ask AI about this Connector

Developed, maintained, and hosted by Vinkius.

MCP VERIFIED · PRODUCTION READY · VINKIUS GUARANTEED

Waiting for input…

Works with modern AI clients that support MCP, including ChatGPT, Claude, Cursor, and more.

Your AI does the work. We keep it safe and sound.

No other AI tool gives you this. Your workflow runs in the client you already love, your account stays protected, and you decide what the agent can and cannot do. It is the whole reason to make the switch.

Each Connector lives inside our infrastructure, the same place where your workflow runs. The three things below are already part of it, working quietly in the background so you never have to think about them. Nothing to add, nothing to set up, nothing to worry about.

V8 Isolate01

Each Connector runs inside its own sealed environment.

Each Connector runs inside its own sealed V8 runtime — no access to your files, your system, or other servers. A Connector never sees past its own request.

Kill Switch02

One switch stops every agent. Instantly.

One action deactivates every Connector, revokes every token, and ends every session at once. AI Governance keeps the record.

FinOps per User03

Spending limits that pause instead of surprise.

Every user keeps their own connections and credentials, isolated from everyone else. Anything that would cross your spending limit is held for your approval, not billed.

Three controls, built into the layer your AI connects through.

Curated set · 10 capabilities

We ship only the actions that matter.

Capability set01 / 03

01-04

4 capabilities in this set.

Part of 10 available through Black Duck (Synopsys).

01
Get bom status
Checks the current calculation status for a specific project version's Bill of Materials.
02
Get vulnerability details
Retrieves specific technical details regarding a single CVE or vulnerability.
03
List code locations
Returns a list of all code locations identified during scans.
04
List users
Provides a list of all users registered within your Black Duck instance.

Capability set02 / 03

05-07

3 capabilities in this set.

Part of 10 available through Black Duck (Synopsys).

05
Search projects
Finds specific projects by searching for their names.
06
List projects
Retrieves a full list of all projects in your Black Duck environment.
07
List project versions
Shows all available versions for a chosen project.

Capability set03 / 03

08-10

3 capabilities in this set.

Part of 10 available through Black Duck (Synopsys).

08
Get project
Fetches detailed metadata for a specific project.
09
List policy rules
Lists the security policy rules currently active in your organization.
10
List vulnerabilities
Lists all vulnerabilities associated with a specific project version.

Real work

What teams actually run

Rapid Vulnerability Response

An engineer asks the agent to find critical CVEs in a specific repository during an incident.

Dependency Auditing

A developer checks if a new library version complies with existing security policies.

Compliance Reporting

A compliance officer requests the current BOM status for a specific project version.

User Access Review

An admin lists users to audit platform access and permissions.

Automate a task

Put Black Duck (Synopsys) to work on one thing.

Step-by-step automations your AI runs through this Connector: the workflow, the prompts to start with, and the exact capabilities behind each move.

One connector, every AI

Black Duck (Synopsys) works with the most popular AI clients.

These are the most popular clients, each with a step-by-step guide: one link, set up once, with governance and visibility built in. And because everything runs on the MCP standard, the same connection also works in any other compatible client — nothing to rebuild.

Building your own app? The connector is yours to use.

You don't need a client to put Black Duck (Synopsys) to work: the same hosted connection plugs into your own applications and agent code, with the same governance on every request. Build with it, chat with it — one connection for both.

Observed, not estimated

902ms average. Fast in production.

Black Duck (Synopsys) is checked daily against the live service.

Daily averagePeak 1147ms

Oct 3Today

Fastest day: 708ms
Slowest day: 1147ms
14-day trend: Improving-9%

Connect your client

One URL. Every client.

Activate the Connector, copy your link, and paste it into the client you already use. 10 capabilities arrive ready to run.

Preview access · not provider authentication

The vk_preview_* token belongs to Vinkius preview infrastructure. It lets Claude discover and display the capabilities of Black Duck (Synopsys), so you can see the experience inside your AI.

It does not authenticate your account with Black Duck (Synopsys). Actions requiring credentials or live account data may not run until you activate the Connector and authorize the service.

Black Duck (Synopsys) Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_eTCyoXvtTgK3EkQ58yH9XVC5hI8lZOw5G2qwRxyC/mcp

Claude Desktop

Follow the steps below to connect in seconds.

1In Claude Desktop, open Settings → Connectors.
2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
3Click Add and start a new chat — Black Duck (Synopsys) capabilities are ready to use.

Configuration · claude_desktop_config.jsonCopy

{
  "mcpServers": {
    "black-duck-synopsys-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_eTCyoXvtTgK3EkQ58yH9XVC5hI8lZOw5G2qwRxyC/mcp"
    }
  }
}

Claude
ChatGPT
Cursor
VS Code
Windsurf
Claude Code
JetBrains
Cline

Step-by-step instructions for each client are in the guide. How to connect

Guided setup for Claude? Set up Black Duck (Synopsys) in Claude and other AIs

See all the AI clients this connector works with ↑

Who it's for

Built for the work Black Duck (Synopsys) owners hand off.

This MCP is built for technical teams managing software supply chain risk and license compliance.

01
Security Engineers
They use the agent to audit vulnerabilities across multiple projects without manual exports.
02
Developers
They check dependency security status directly from their code editor.
03
Compliance Officers
They pull policy summaries and BOM statuses for reporting.

FAQ

Questions Black Duck (Synopsys) owners ask.

01
How do I connect my Black Duck instance?
You provide your Black Duck Instance URL and API Token through the Vinkius interface to establish the connection.
02
Which AI clients can I use with this MCP?
You can use any MCP-compatible client, including Claude, Cursor, and Windsurf.
03
Can I check for CVEs using my AI agent?
Yes, you can use the agent to list vulnerabilities for project versions or get specific details on a CVE.
04
Does this MCP handle license compliance?
Yes, it allows you to monitor Bill of Materials (BOM) status and audit security policy rules.
05
Where is my data stored?
Vinkius hosts the MCP and manages the connection to your Black Duck instance using the credentials you provide.
06
Can I check for critical vulnerabilities in a specific project version?
Yes! Use the list_vulnerabilities capability with the Project and Version IDs. Your agent will fetch the list of components with known security flaws and their severity levels.
07
How do I know if my Black Duck scan is finished?
Simply ask the agent to get_bom_status for the specific project version. It will return the current calculation status, showing if the BOM is 'Up to date' or still processing.
08
What happens if I trigger API rate limits?
Black Duck limits connections to 100 requests per 10 seconds or 10,000 per 30 minutes. If you exceed this sustained load protection, you will temporarily receive a HTTP 429 error code restricting your IP for 15 minutes.

Explore

More in Fort Knox

Connect Black Duck (Synopsys) to Claude, Cursor, ChatGPT & more

Your AI does the work. We keep it safe and sound.

Each Connector runs inside its own sealed environment.

One switch stops every agent. Instantly.

Spending limits that pause instead of surprise.

We ship only the actions that matter.

01-04

Get bom status

Get vulnerability details

List code locations

List users

05-07

Search projects

List projects

List project versions

08-10

Get project

List policy rules

List vulnerabilities

What teams actually run

Rapid Vulnerability Response

Dependency Auditing

Compliance Reporting

User Access Review

Building your own app? The connector is yours to use.

Black Duck (Synopsys) Connector

Claude Desktop

Security Engineers

Developers

Compliance Officers

How do I connect my Black Duck instance?

Which AI clients can I use with this MCP?

Can I check for CVEs using my AI agent?

Does this MCP handle license compliance?

Where is my data stored?

Can I check for critical vulnerabilities in a specific project version?

How do I know if my Black Duck scan is finished?

What happens if I trigger API rate limits?

FOSSA (License Compliance) AI Connector

LicenseCheck API AI Connector

Google Deps.dev Security Hacker AI Connector

Aikido Security AI Connector

Suggestions

Socket.dev (Dependency Security) AI Connector

HackEDU (Security Journey) AI Connector

zrok (Open-Source Tunnel) AI Connector

Dependency License Compliance Checker AI Connector