An astronaut overseeing a futuristic data hub
Download PDFMarkdown Version

Connect Veracode to ChatGPT, Claude and Gemini

Set it up once and it works in ChatGPT, Claude, Cursor, and any other client you love. It all runs safely in the background, so you can relax and focus on what really matters. Manage your entire application security posture through chat.

Ask AI about this Connector

Developed, maintained, and hosted by Vinkius.

MCP VERIFIED · PRODUCTION READY · VINKIUS GUARANTEED

Waiting for input…

Works with modern AI clients that support MCP, including ChatGPT, Claude, Cursor, and more.

ChatGPTClaudeCursorPerplexityGeminiMicrosoft CopilotRaycastMeta AI

Your AI does the work. We keep it safe and sound.

No other AI tool gives you this. Your workflow runs in the client you already love, your account stays protected, and you decide what the agent can and cannot do. It is the whole reason to make the switch.

Each Connector lives inside our infrastructure, the same place where your workflow runs. The three things below are already part of it, working quietly in the background so you never have to think about them. Nothing to add, nothing to set up, nothing to worry about.

A futuristic MCP client docking bay
V8 Isolate01

Each Connector runs inside its own sealed environment.

Each Connector runs inside its own sealed V8 runtime — no access to your files, your system, or other servers. A Connector never sees past its own request.

Kill Switch02

One switch stops every agent. Instantly.

One action deactivates every Connector, revokes every token, and ends every session at once. AI Governance keeps the record.

FinOps per User03

Spending limits that pause instead of surprise.

Every user keeps their own connections and credentials, isolated from everyone else. Anything that would cross your spending limit is held for your approval, not billed.

Three controls, built into the layer your AI connects through.

Curated set · 10 capabilities

We ship only the actions that matter.

Capability set01 / 03

01-04

4 capabilities in this set.

Part of 10 available through Veracode.

  1. 01

    List security findings

    Retrieves all unified security findings for a specific application.

  2. 02

    List veracode users

    Lists authorized identity users to help you manage RBAC roles.

  3. 03

    Create application

    Creates a new Veracode application profile using a JSON app schema.

  4. 04

    Delete application

    Permanently removes a Veracode application from your account.

Capability set02 / 03

05-07

3 capabilities in this set.

Part of 10 available through Veracode.

  1. 05

    Get API health

    Checks the current status of your Veracode connection.

  2. 06

    Get application details

    Provides a deep profile of an application including risk scores and compliance status.

  3. 07

    Get finding details

    Explains specific vulnerability details like CWE type, affected code paths, and remediation steps.

Capability set03 / 03

08-10

3 capabilities in this set.

Part of 10 available through Veracode.

  1. 08

    List applications

    Returns a list of all applications tracked in your Veracode account.

  2. 09

    List dynamic analyses

    Retrieves a list of all configured DAST scans.

  3. 10

    List sandboxes

    Shows all testing sandboxes currently linked to an application.

Real work

What teams actually run

01

Rapid Bug Fixing

A developer asks the agent for the exact line of code and remediation steps for a specific Finding ID.

02

Security Auditing

A manager asks for a summary of all critical vulnerabilities across the entire application portfolio.

03

Pre-Commit Profiling

An engineer creates a new application profile in Veracode before starting a new project.

04

Scan Monitoring

A DevSecOps engineer checks the real-time status of DAST scans via chat.

Automate a task

Put Veracode to work on one thing.

Step-by-step automations your AI runs through this Connector: the workflow, the prompts to start with, and the exact capabilities behind each move.

One connector, every AI

Veracode works with the most popular AI clients.

These are the most popular clients, each with a step-by-step guide: one link, set up once, with governance and visibility built in. And because everything runs on the MCP standard, the same connection also works in any other compatible client — nothing to rebuild.

ClaudeClaudeChatGPTChatGPTGeminiGeminiPerplexityPerplexityGrokGrokMicrosoft CopilotMicrosoft CopilotCursorCursorVS CodeVS CodeWindsurfWindsurfJetBrainsJetBrainsClineClineLangChainLangChainVercel AI SDKVercel AI SDKLovableLovableZ.aiZ.aiRaycastRaycastQwen CodeQwen CodeKimi CodeKimi CodeLe ChatLe Chat

Building your own app? The connector is yours to use.

You don't need a client to put Veracode to work: the same hosted connection plugs into your own applications and agent code, with the same governance on every request. Build with it, chat with it — one connection for both.

Observed, not estimated

899ms average. Fast in production.

Veracode is checked daily against the live service.

Daily averagePeak 1039ms
Oct 3Today
Fastest day
678ms
Slowest day
1039ms
14-day trend
Stable+4%

Connect your client

One URL. Every client.

Activate the Connector, copy your link, and paste it into the client you already use. 10 capabilities arrive ready to run.

Preview access · not provider authentication

The vk_preview_* token belongs to Vinkius preview infrastructure. It lets Claude discover and display the capabilities of Veracode, so you can see the experience inside your AI.

It does not authenticate your account with Veracode. Actions requiring credentials or live account data may not run until you activate the Connector and authorize the service.

Veracode Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_ouSVtPeDCUVttGmj9FxRQS1WO3untKs29VHwWYZI/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Veracode capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "veracode-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_ouSVtPeDCUVttGmj9FxRQS1WO3untKs29VHwWYZI/mcp"
    }
  }
}
  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Step-by-step instructions for each client are in the guide. How to connect

Guided setup for Claude? Set up Veracode in Claude and other AIs

See all the AI clients this connector works with ↑

Who it's for

Built for the work Veracode owners hand off.

This MCP is built for technical teams who need to bridge the gap between security scanning and active development.

  • 01

    DevSecOps Engineers

    They use the agent to check scan statuses and summarize flaws without manual exports.

  • 02

    Application Developers

    They command the agent to read specific finding reports to fix code directly in their IDE.

  • 03

    CISO and Security Managers

    They use the agent to audit user identities and track application risk matrices.

FAQ

Questions Veracode owners ask.

  • 01

    How do I connect my Veracode account?

    You provide your Veracode API ID and API Secret through the Vinkius interface to establish a secure connection.

  • 02

    Which AI clients can I use with this MCP?

    You can use any MCP-compatible client, including Claude, Cursor, and Windsurf.

  • 03

    Can I fix code vulnerabilities using this capability?

    The MCP provides the details, affected code paths, and remediation guidance, which your agent can then use to help you write patches in your IDE.

  • 04

    Does this MCP support DAST scans?

    Yes, you can use it to list and query the status of configured Dynamic Analysis (DAST) scans.

  • 05

    Is it safe to provide my API credentials?

    Vinkius manages your credentials securely, ensuring your Veracode API ID and Secret are handled safely for your AI client to use.

  • 06

    Can I get code remediation details directly in conversational chat?

    Yes! If you ask your AI: fetch finding details for ID '391' on the 'PaymentGateway' app, it will query Veracode and describe exactly what caused the vulnerability (e.g. CWE-79) and provide remediation context natively inside your text editor or UI.

  • 07

    Are both Sandbox and Policy findings merged intelligently?

    The capability endpoints mirror Veracode's structure natively. You can query your list_sandboxes specifically, keeping your sandbox data accurately separated from your main application's formal risk profile and finding charts.

  • 08

    Can I permanently delete unused legacy applications from Veracode via AI chat?

    Yes. The deleteApplicationTool is included. By providing the specific GUID of the application, the agent can irrevocably remove the AppSec profile along with all linked analyses, findings, and history, streamlining data hygiene.

Explore

More in Fort Knox

Suggestions

Connect Veracode to Claude, Cursor, ChatGPT & more