Download PDFMarkdown Version
ClaudeChatGPTPerplexityGeminiMicrosoft CopilotRaycastMeta AIGrokZ.aiQwenKimi
DeepSeekMistralCursorVS CodeWindsurfJetBrainsClineLovableVercel AI SDKLangChain

Use Checkmarx with your AI.

Connect your account once and let the AI you already use work with it, without building another integration. Automate AppSec via Checkmarx One. trigger core scans, analyze vulnerabilities, discover Best Fix Locations (BFL), and monitor KICS results.

Included with plan

Ask AI about this Connector

Developed, maintained, and hosted by Vinkius.

MCP VERIFIED · PRODUCTION READY · VINKIUS GUARANTEED

Waiting for input…

Works with modern AI clients that support MCP, including ChatGPT, Claude, Cursor, and more.

ChatGPTClaudeCursorPerplexityGeminiMicrosoft CopilotRaycastMeta AI

Complete set · 10 capabilities

The complete Checkmarx capability set.

These are the exact actions your AI can choose when you ask it to work with Checkmarx.

Capability set01 / 03

01-04

4 capabilities in this set.

Part of 10 available through Checkmarx.

  1. 01

    List applications

    An Application acts as an overarching container for multiple individual microservices or projects, providing aggregated risk reporting and security metric visibility across a logical product. List Checkmarx One Applications

  2. 02

    List scans

    Includes the scan ID, current status (Completed, Running, Failed, Canceled), branch targeted, and timestamps. Use the scan ID to fetch the actual vulnerability results. List all historical and active scans for a Checkmarx project

  3. 03

    Get scan results

    Each result includes the vulnerability severity, state (To Verify, Confirmed, Urgent), description, and the exact lines of code where the flaw was detected. Requires a completed scan ID. Download SAST and security vulnerability findings for a scan

  4. 04

    List bfl

    Provide the scan ID and the specific query (rule) ID string. Get Best Fix Location (BFL) for a specific vulnerability node

Capability set02 / 03

05-07

3 capabilities in this set.

Part of 10 available through Checkmarx.

  1. 05

    Cancel scan

    Prevents unnecessary engine resource consumption and drops the scanning context if the developer pushed a new commit overlapping the running job. Cancel an actively running Checkmarx scan

  2. 06

    Get kics results

    Focuses solely on Terraform, CloudFormation, Kubernetes YAML, and Dockerfile misconfigurations rather than typical application source code flaws. Get specialized Infrastructure as Code (KICS) findings

  3. 07

    Get project

    Essential for ensuring the correct branch and source control context is selected before triggering new scans. Get details for a specific Checkmarx project

Capability set03 / 03

08-10

3 capabilities in this set.

Part of 10 available through Checkmarx.

  1. 08

    Get scan details

    It returns granular execution details including which scan engines (SAST, SCA, KICS) were fired, their individual execution timings, and any engine-specific failure reasons. Check the precise status and configuration of a Checkmarx scan

  2. 09

    List projects

    A Project represents a specific codebase. Includes project metadata, IDs, and assigned application linkages. List all Checkmarx One Projects

  3. 10

    Run scan

    Extensively used in CI/CD integrations to assert security quality on PRs. Returns the ID of the newly queued scan. Trigger a new Checkmarx One code scan

Observed, not estimated

879ms average. Fast in production.

Checkmarx is checked daily against the live service.

Daily averagePeak 1080ms
Aug 20Today
Fastest day
711ms
Slowest day
1080ms
14-day trend
Slowing+24%

Connect your client

One URL. Every client.

Activate the Connector, copy your link, and paste it into the client you already use. 10 capabilities arrive ready to run.

Preview access · not provider authentication

The vk_preview_* token belongs to Vinkius preview infrastructure. It lets Claude discover and display the capabilities of Checkmarx, so you can see the experience inside your AI.

It does not authenticate your account with Checkmarx. Actions requiring credentials or live account data may not run until you activate the Connector and authorize the service.

Checkmarx Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_thwJCCvAxQj2dRXly3vkJnbbHvTu7jJNcAvioyvo/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Checkmarx capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "checkmarx-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_thwJCCvAxQj2dRXly3vkJnbbHvTu7jJNcAvioyvo/mcp"
    }
  }
}
  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Step-by-step instructions for each client are in the guide. How to connect

FAQ

Questions Checkmarx owners ask.

  • 01

    How can the AI help me fix a vulnerability faster?

    Once an issue is identified via scan results, ask your agent to pull the 'Best Fix Location' (BFL) using the query ID. Checkmarx mathematically finds the common root code block, and your AI can instantly rewrite that exact block to sanitize the flaw. You save hours tracing code paths.

  • 02

    Can the agent initiate a static code scan independently?

    Yes! Tell the agent to 'Run a scan on project ID X targeting the main branch'. It initiates the analysis array natively across Checkmarx One engines. You can poll for completion status later and retrieve the new dataset directly via chat.

  • 03

    Does it segregate AppSec results from Cloud infrastructure flaws?

    It does. Application flaws are pulled cleanly via get_scan_results, whereas misconfigurations tied to Docker, Kubernetes, or Terraform limits use a dedicated get_kics_results pipeline. The agent intrinsically separates the context for your DevOps team.

Explore

More in Fort Knox

Suggestions