Use Veracode with your AI.
Connect your account once and let the AI you already use work with it, without building another integration. Bring Veracode AppSec to your AI. Analyze source code flaws, extract application profiles, and track vulnerabilities conversationaly.
Developed, maintained, and hosted by Vinkius.
MCP VERIFIED · PRODUCTION READY · VINKIUS GUARANTEED
Waiting for input…
Works with modern AI clients that support MCP, including ChatGPT, Claude, Cursor, and more.
Complete set · 10 capabilities
The complete Veracode capability set.
These are the exact actions your AI can choose when you ask it to work with Veracode.
01-04
4 capabilities in this set.
Part of 10 available through Veracode.
- 01
List security findings
Retrieve the unified security findings for an application
- 02
List veracode users
Used to manage RBAC roles. List authorized Veracode identity users
- 03
Create application
Provide the app schema and profile name as a JSON string. Create a new Veracode application profile container
- 04
Delete application
This action is irreversible. Delete a Veracode application permanently
05-07
3 capabilities in this set.
Part of 10 available through Veracode.
- 05
Get API health
Check the health of Veracode connection
- 06
Get application details
Information includes its Veracode compliance policy status, business criticality rating, deployment state, and risk scores. Get a detailed profile of a Veracode application
- 07
Get finding details
Explains the vulnerability type (CWE), affected source file, code path, and remediation guidance. Get precise vulnerability details for a specific flaw/finding
08-10
3 capabilities in this set.
Part of 10 available through Veracode.
- 08
List applications
Most structural entities return a globally unique GUID which is required for sub-resource lookups. List all Veracode AppSec Applications
- 09
List dynamic analyses
List configured Dynamic Analysis (DAST) scans
- 10
List sandboxes
List all testing sandboxes linked to an application
Observed, not estimated
868ms average. Fast in production.
Veracode is checked daily against the live service.
- Fastest day
- 649ms
- Slowest day
- 1021ms
- 14-day trend
- Slowing+22%
Connect your client
One URL. Every client.
Activate the Connector, copy your link, and paste it into the client you already use. 10 capabilities arrive ready to run.
Preview access · not provider authentication
The vk_preview_* token belongs to Vinkius preview infrastructure. It lets Claude discover and display the capabilities of Veracode, so you can see the experience inside your AI.
It does not authenticate your account with Veracode. Actions requiring credentials or live account data may not run until you activate the Connector and authorize the service.
Veracode Connector
You're all set. Choose your MCP client and follow the setup instructions.
https://edge.vinkius.com/vk_preview_ouSVtPeDCUVttGmj9FxRQS1WO3untKs29VHwWYZI/mcpClaude Desktop
Follow the steps below to connect in seconds.
- 1In Claude Desktop, open Settings → Connectors.
- 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
- 3Click Add and start a new chat — Veracode capabilities are ready to use.
{
"mcpServers": {
"veracode-mcp": {
"url": "https://edge.vinkius.com/vk_preview_ouSVtPeDCUVttGmj9FxRQS1WO3untKs29VHwWYZI/mcp"
}
}
}
Claude
ChatGPT
Cursor
VS Code
Windsurf
Claude Code
JetBrains
Cline
Step-by-step instructions for each client are in the guide. How to connect
FAQ
Questions Veracode owners ask.
- 01
Can I get code remediation details directly in conversational chat?
Yes! If you ask your AI: fetch finding details for ID '391' on the 'PaymentGateway' app, it will query Veracode and describe exactly what caused the vulnerability (e.g. CWE-79) and provide remediation context natively inside your text editor or UI.
- 02
Are both Sandbox and Policy findings merged intelligently?
The capability endpoints mirror Veracode's structure natively. You can query your list_sandboxes specifically, keeping your sandbox data accurately separated from your main application's formal risk profile and finding charts.
- 03
Can I permanently delete unused legacy applications from Veracode via AI chat?
Yes. The deleteApplicationTool is included. By providing the specific GUID of the application, the agent can irrevocably remove the AppSec profile along with all linked analyses, findings, and history, streamlining data hygiene.
Explore
More in Fort Knox
Vercel AI Connector
Manage Vercel deployments, projects and domains via API — inspect builds, track deployments, manage env vars a
ViewVercel AI Connector
Deploy frontend applications instantly with a platform optimized for Next.js, serverless functions, and edge c
ViewVercel AI Connector
Bring your Vercel deployment infrastructure into chat. Control project domains, trigger manual builds, and ins
ViewBlack Duck (Synopsys) AI Connector
Secure your open source supply chain via Black Duck — list projects, versions, and vulnerabilities directly fr
View
Suggestions
ApplicantStack AI Connector
Manage your hiring process with ApplicantStack — track jobs, candidates, and hires via AI.
ViewKeepcon AI Connector
Automate content moderation and semantic analysis via Keepcon.
ViewPropelAuth (B2B Authentication) AI Connector
Manage B2B authentication, users, and organizations via PropelAuth — handle user provisioning, org management,
ViewDescope (Auth Platform) AI Connector
Manage user authentication flows via Descope — initiate OTPs, Magic Links, Enchanted Links, and OAuth directly
View
