How do I get my AppScan API Key ID and Secret?

Log in to the AppScan on Cloud console, go to your **User Profile** (top right), and select **API Keys**. You can generate a new Key ID and Key Secret there.

Does this server support the EU region?

Yes, you can configure the `APPSCAN_REGION` environment variable to `eu` to connect to the European data center (`eu.cloud.appscan.com`).

Can I start a scan for an internal application?

Yes, provided you have an AppScan Presence (local agent) configured. You can use the `list_presence` tool to check their availability before starting a scan.

HCL AppScan MCP Server

Name: HCL AppScan
Availability: InStock
Author: Vinkius

hcl-software.com/appscan

Built by Vinkius GDPR ToolsFree

Manage security scans and vulnerabilities with HCL AppScan — track issues and audit applications via AI.

Vinkius AI Gateway supports streamable HTTP and SSE.

Works with every AI agent you already use

…and any MCP-compatible client

HCL AppScan MCP Server: see your AI Agent in action

AI Agent→Vinkius→HCL AppScan

You

Vinkius AI Gateway

GDPR·High Security·Kill Switch·Ultra-Low Latency·Plug and Play

Built-in capabilities (10)

get_account_check

Verify AppScan account connection

get_account_info

Retrieve authenticated user information

get_app

Get details for a specific application

get_issue

Get detailed information about a specific vulnerability

get_scan

Get details and status for a specific scan

list_apps

List all applications in your AppScan inventory

list_issues

List vulnerabilities found for a specific application

list_presence

List AppScan Presences (local agents)

list_scans

List all scans performed in the account

start_dast_scan

Start a new Dynamic Analysis (DAST) scan

What this connector unlocks

The HCL AppScan MCP Server brings powerful application security testing capabilities directly to your AI agent. Seamlessly manage your security posture by monitoring vulnerabilities, tracking scan progress, and auditing your application inventory across HCL AppScan on Cloud (ASoC).

Key Features

Inventory Management — List and search for applications in your security inventory to find their unique IDs.
Vulnerability Tracking — Retrieve detailed lists of security issues found during scans, including severity and status.
Scan Oversight — Monitor all performed scans and check the real-time status of active security tests.
Dynamic Analysis (DAST) — Start new DAST scans for your web applications directly from your chat interface.
Agent & Presence Monitoring — List available Presences (local agents) used for scanning internal applications.
Real-time Insights — Get instant summaries of your security findings and prioritize remediation efforts.

Who is this for?

Security Engineers — Quickly audit security findings across multiple applications without manual dashboard exports.
DevSecOps Teams — Integrate security scan monitoring and initiation into your automated workflows.
Compliance Officers — Monitor application security status and ensure all apps are regularly scanned.

Frequently asked questions

Give your AI agents the power of HCL AppScan

Access HCL AppScan and 2,000+ MCP servers — ready for your agents to use, right now. No glue code. No custom integrations. Just plug Vinkius AI Gateway and let your agents work.

DETAILS

CategoryFort Knox