An astronaut overseeing a futuristic data hub
Download PDFMarkdown Version

Connect Checkmarx to ChatGPT, Claude and Gemini

Set it up once and it works in ChatGPT, Claude, Cursor, and any other client you love. It all runs safely in the background, so you can relax and focus on what really matters. Manage your security posture without leaving your IDE.

Ask AI about this Connector

Developed, maintained, and hosted by Vinkius.

MCP VERIFIED · PRODUCTION READY · VINKIUS GUARANTEED

Waiting for input…

Works with modern AI clients that support MCP, including ChatGPT, Claude, Cursor, and more.

ChatGPTClaudeCursorPerplexityGeminiMicrosoft CopilotRaycastMeta AI

Your AI does the work. We keep it safe and sound.

No other AI tool gives you this. Your workflow runs in the client you already love, your account stays protected, and you decide what the agent can and cannot do. It is the whole reason to make the switch.

Each Connector lives inside our infrastructure, the same place where your workflow runs. The three things below are already part of it, working quietly in the background so you never have to think about them. Nothing to add, nothing to set up, nothing to worry about.

A futuristic MCP client docking bay
V8 Isolate01

Each Connector runs inside its own sealed environment.

Each Connector runs inside its own sealed V8 runtime — no access to your files, your system, or other servers. A Connector never sees past its own request.

Kill Switch02

One switch stops every agent. Instantly.

One action deactivates every Connector, revokes every token, and ends every session at once. AI Governance keeps the record.

FinOps per User03

Spending limits that pause instead of surprise.

Every user keeps their own connections and credentials, isolated from everyone else. Anything that would cross your spending limit is held for your approval, not billed.

Three controls, built into the layer your AI connects through.

Curated set · 10 capabilities

We ship only the actions that matter.

Capability set01 / 03

01-04

4 capabilities in this set.

Part of 10 available through Checkmarx.

  1. 01

    List applications

    Lists your Checkmarx One Applications. Use this to see the high-level containers that group your microservices and projects.

  2. 02

    List scans

    Retrieves all historical and active scans for a project. It provides the scan ID, status, and branch info needed to pull specific results.

  3. 03

    Get scan results

    Downloads SAST and security findings for a completed scan. It includes severity, state, and the specific lines of code where flaws were found.

  4. 04

    List bfl

    Provides the Best Fix Location (BFL) for a specific vulnerability. It identifies the optimal spot in your code to apply a patch.

Capability set02 / 03

05-07

3 capabilities in this set.

Part of 10 available through Checkmarx.

  1. 05

    Cancel scan

    Stops an active Checkmarx scan. This is useful for dropping redundant jobs when new commits make current scans obsolete.

  2. 06

    Get kics results

    Fetches specialized Infrastructure as Code (KICS) findings. It focuses on misconfigurations in Terraform, Dockerfiles, or Kubernetes YAML.

  3. 07

    Get project

    Gets metadata for a specific Checkmarx project. Use this to confirm the correct branch and source control context before scanning.

Capability set03 / 03

08-10

3 capabilities in this set.

Part of 10 available through Checkmarx.

  1. 08

    Get scan details

    Checks the granular execution details of a scan. It shows which engines like SAST or SCA were used and their specific timings.

  2. 09

    List projects

    Lists all Checkmarx One Projects. This provides the project IDs and metadata required to start targeted security work.

  3. 10

    Run scan

    Triggers a new Checkmarx One code scan. This capability is typically used to assert security quality during CI/CD or PR workflows.

Real work

What teams actually run

01

PR Security Checks

Trigger a new scan via the agent as soon as a pull request is opened to ensure code quality.

02

Rapid Vulnerability Response

Ask your agent for the BFL of a critical flaw to get an immediate path to a fix.

03

Infrastructure Auditing

Check Terraform or Dockerfile configurations for errors using KICS results during the build process.

04

Scan Monitoring

Poll the status of running scans to know exactly when results are ready for review.

Automate a task

Put Checkmarx to work on one thing.

Step-by-step automations your AI runs through this Connector: the workflow, the prompts to start with, and the exact capabilities behind each move.

One connector, every AI

Checkmarx works with the most popular AI clients.

These are the most popular clients, each with a step-by-step guide: one link, set up once, with governance and visibility built in. And because everything runs on the MCP standard, the same connection also works in any other compatible client — nothing to rebuild.

ClaudeClaudeChatGPTChatGPTGeminiGeminiPerplexityPerplexityGrokGrokMicrosoft CopilotMicrosoft CopilotCursorCursorVS CodeVS CodeWindsurfWindsurfJetBrainsJetBrainsClineClineLangChainLangChainVercel AI SDKVercel AI SDKLovableLovableZ.aiZ.aiRaycastRaycastQwen CodeQwen CodeKimi CodeKimi CodeLe ChatLe Chat

Building your own app? The connector is yours to use.

You don't need a client to put Checkmarx to work: the same hosted connection plugs into your own applications and agent code, with the same governance on every request. Build with it, chat with it — one connection for both.

Observed, not estimated

935ms average. Fast in production.

Checkmarx is checked daily against the live service.

Daily averagePeak 1148ms
Oct 12Today
Fastest day
827ms
Slowest day
1148ms
14-day trend
Improving-20%

Connect your client

One URL. Every client.

Activate the Connector, copy your link, and paste it into the client you already use. 10 capabilities arrive ready to run.

Preview access · not provider authentication

The vk_preview_* token belongs to Vinkius preview infrastructure. It lets Claude discover and display the capabilities of Checkmarx, so you can see the experience inside your AI.

It does not authenticate your account with Checkmarx. Actions requiring credentials or live account data may not run until you activate the Connector and authorize the service.

Checkmarx Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_thwJCCvAxQj2dRXly3vkJnbbHvTu7jJNcAvioyvo/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Checkmarx capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "checkmarx-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_thwJCCvAxQj2dRXly3vkJnbbHvTu7jJNcAvioyvo/mcp"
    }
  }
}
  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Step-by-step instructions for each client are in the guide. How to connect

Guided setup for Claude? Set up Checkmarx in Claude and other AIs

See all the AI clients this connector works with ↑

Who it's for

Built for the work Checkmarx owners hand off.

This MCP is built for technical teams who need to integrate security directly into their development lifecycle.

  • 01

    Security Engineers

    They use the agent to orchestrate triage and manage vulnerabilities without leaving their primary workstation.

  • 02

    DevOps Teams

    They use it to investigate KICS misconfigurations in staging branches before deployment.

  • 03

    Developers

    They use it to get BFL data and immediate code rewrite suggestions for zero-day issues.

FAQ

Questions Checkmarx owners ask.

  • 01

    How do I connect this MCP to my Checkmarx environment?

    You need to provide a valid Checkmarx One JWT Token. Once you add this to the MCP settings in Vinkius, it is ready to use in your AI client.

  • 02

    Which AI clients can I use with this MCP?

    This MCP works with any compatible client, including Claude, Cursor, Windsurf, and VS Code.

  • 03

    Can I stop a scan if it is taking too long?

    Yes, you can use the cancel_scan capability to stop an active scan through your agent.

  • 04

    Does this handle Infrastructure as Code security?

    Yes, the get_kics_results capability provides findings for Terraform, Dockerfiles, and Kubernetes YAML.

  • 05

    What is Best Fix Location (BFL)?

    BFL is a feature that identifies the most effective spot in your code to apply a patch to resolve a specific vulnerability.

  • 06

    How can the AI help me fix a vulnerability faster?

    Once an issue is identified via scan results, ask your agent to pull the 'Best Fix Location' (BFL) using the query ID. Checkmarx mathematically finds the common root code block, and your AI can instantly rewrite that exact block to sanitize the flaw. You save hours tracing code paths.

  • 07

    Can the agent initiate a static code scan independently?

    Yes! Tell the agent to 'Run a scan on project ID X targeting the main branch'. It initiates the analysis array natively across Checkmarx One engines. You can poll for completion status later and retrieve the new dataset directly via chat.

  • 08

    Does it segregate AppSec results from Cloud infrastructure flaws?

    It does. Application flaws are pulled cleanly via get_scan_results, whereas misconfigurations tied to Docker, Kubernetes, or Terraform limits use a dedicated get_kics_results pipeline. The agent intrinsically separates the context for your DevOps team.

Explore

More in Fort Knox

Suggestions

Connect Checkmarx to Claude, Cursor, ChatGPT & more