An astronaut overseeing a futuristic data hub
Download PDFMarkdown Version

Connect HCL AppScan to ChatGPT, Claude and Gemini

Set it up once and it works in ChatGPT, Claude, Cursor, and any other client you love. It all runs safely in the background, so you can relax and focus on what really matters. Run scans and track vulnerabilities through your AI agent.

Ask AI about this Connector

Developed, maintained, and hosted by Vinkius.

MCP VERIFIED · PRODUCTION READY · VINKIUS GUARANTEED

Waiting for input…

Works with modern AI clients that support MCP, including ChatGPT, Claude, Cursor, and more.

ChatGPTClaudeCursorPerplexityGeminiMicrosoft CopilotRaycastMeta AI

Your AI does the work. We keep it safe and sound.

No other AI tool gives you this. Your workflow runs in the client you already love, your account stays protected, and you decide what the agent can and cannot do. It is the whole reason to make the switch.

Each Connector lives inside our infrastructure, the same place where your workflow runs. The three things below are already part of it, working quietly in the background so you never have to think about them. Nothing to add, nothing to set up, nothing to worry about.

A futuristic MCP client docking bay
V8 Isolate01

Each Connector runs inside its own sealed environment.

Each Connector runs inside its own sealed V8 runtime — no access to your files, your system, or other servers. A Connector never sees past its own request.

Kill Switch02

One switch stops every agent. Instantly.

One action deactivates every Connector, revokes every token, and ends every session at once. AI Governance keeps the record.

FinOps per User03

Spending limits that pause instead of surprise.

Every user keeps their own connections and credentials, isolated from everyone else. Anything that would cross your spending limit is held for your approval, not billed.

Three controls, built into the layer your AI connects through.

Curated set · 10 capabilities

We ship only the actions that matter.

Capability set01 / 03

01-04

4 capabilities in this set.

Part of 10 available through HCL AppScan.

  1. 01

    Get account check

    This capability checks if your AppScan account connection is active and valid.

  2. 02

    Get scan

    Use this to pull the current status and specific details for a single scan.

  3. 03

    Get account info

    This capability retrieves the profile and details of the currently authenticated user.

  4. 04

    Get app

    This capability fetches specific configuration and security data for a single application.

Capability set02 / 03

05-07

3 capabilities in this set.

Part of 10 available through HCL AppScan.

  1. 05

    Get issue

    Use this to get a deep dive into the details of a specific security vulnerability.

  2. 06

    List issues

    This capability pulls a list of all vulnerabilities identified within a specific application.

  3. 07

    List presence

    This capability shows you the available AppScan Presences used for local agent scanning.

Capability set03 / 03

08-10

3 capabilities in this set.

Part of 10 available through HCL AppScan.

  1. 08

    List scans

    Use this to see a history of all scans performed under your account.

  2. 09

    Start dast scan

    This capability triggers a new Dynamic Analysis (DAST) scan for a web application.

  3. 10

    List apps

    This capability retrieves a full list of every application in your AppScan inventory.

Real work

What teams actually run

01

Rapid Vulnerability Triage

Ask your agent to find all high-severity issues for a specific app to prioritize fixes.

02

On-Demand Security Testing

Start a new DAST scan for a web application immediately after a new deployment.

03

Security Inventory Audits

Get a complete list of all applications to ensure nothing is missing from your security coverage.

04

Scan Progress Monitoring

Check the real-time status of a long-running scan to see when results will be ready.

Automate a task

Put HCL AppScan to work on one thing.

Step-by-step automations your AI runs through this Connector: the workflow, the prompts to start with, and the exact capabilities behind each move.

One connector, every AI

HCL AppScan works with the most popular AI clients.

These are the most popular clients, each with a step-by-step guide: one link, set up once, with governance and visibility built in. And because everything runs on the MCP standard, the same connection also works in any other compatible client — nothing to rebuild.

ClaudeClaudeChatGPTChatGPTGeminiGeminiPerplexityPerplexityGrokGrokMicrosoft CopilotMicrosoft CopilotCursorCursorVS CodeVS CodeWindsurfWindsurfJetBrainsJetBrainsClineClineLangChainLangChainVercel AI SDKVercel AI SDKLovableLovableZ.aiZ.aiRaycastRaycastQwen CodeQwen CodeKimi CodeKimi CodeLe ChatLe Chat

Building your own app? The connector is yours to use.

You don't need a client to put HCL AppScan to work: the same hosted connection plugs into your own applications and agent code, with the same governance on every request. Build with it, chat with it — one connection for both.

Observed, not estimated

899ms average. Fast in production.

HCL AppScan is checked daily against the live service.

Daily averagePeak 1105ms
Oct 3Today
Fastest day
717ms
Slowest day
1105ms
14-day trend
Improving-10%

Connect your client

One URL. Every client.

Activate the Connector, copy your link, and paste it into the client you already use. 10 capabilities arrive ready to run.

Preview access · not provider authentication

The vk_preview_* token belongs to Vinkius preview infrastructure. It lets Claude discover and display the capabilities of HCL AppScan, so you can see the experience inside your AI.

It does not authenticate your account with HCL AppScan. Actions requiring credentials or live account data may not run until you activate the Connector and authorize the service.

HCL AppScan Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_mYfPAvMiXfAXuaYYaGV3n5T9Sji2RICkXrcN7Ich/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — HCL AppScan capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "hcl-appscan-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_mYfPAvMiXfAXuaYYaGV3n5T9Sji2RICkXrcN7Ich/mcp"
    }
  }
}
  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Step-by-step instructions for each client are in the guide. How to connect

Guided setup for Claude? Set up HCL AppScan in Claude and other AIs

See all the AI clients this connector works with ↑

Who it's for

Built for the work HCL AppScan owners hand off.

This MCP is built for technical teams managing application security at scale.

  • 01

    Security Engineers

    They use the agent to audit findings across multiple apps without manual exports.

  • 02

    DevSecOps Teams

    They trigger scans and monitor security health within automated workflows.

  • 03

    Compliance Officers

    They check application security status to ensure regular scanning requirements are met.

FAQ

Questions HCL AppScan owners ask.

  • 01

    What AI clients can I use with this MCP?

    You can use any MCP-compatible client, including Claude, Cursor, Windsurf, and VS Code.

  • 02

    Do I need to host the MCP myself?

    No, Vinkius hosts and manages the MCP for you. You just connect your client and start working.

  • 03

    Can I start actual scans through the chat?

    Yes, you can trigger new Dynamic Analysis (DAST) scans directly through your agent.

  • 04

    How does this handle my AppScan credentials?

    Vinkius manages the credentials securely, so you don't have to handle them manually in every client.

  • 05

    Can I see the status of my local scanning agents?

    Yes, the MCP includes capabilities to list and monitor AppScan Presences used for internal scanning.

  • 06

    How do I get my AppScan API Key ID and Secret?

    Log in to the AppScan on Cloud console, go to your User Profile (top right), and select API Keys. You can generate a new Key ID and Key Secret there.

  • 07

    Does this server support the EU region?

    Yes, you can configure the APPSCAN_REGION environment variable to eu to connect to the European data center (eu.cloud.appscan.com).

  • 08

    Can I start a scan for an internal application?

    Yes, provided you have an AppScan Presence (local agent) configured. You can use the list_presence capability to check their availability before starting a scan.

Explore

More in Fort Knox

Suggestions

Connect HCL AppScan to Claude, Cursor, ChatGPT & more