• TRIAGE
  • ANALYSIS
  • REMEDIATION
  • HUMAN

How to fix code vulnerabilities with your AI

Connect Veracode to your AI client once. From there, you can pull security findings and get direct remediation steps for your code.

Ask AI about this page

Short answer

How can I use my AI to fix Veracode vulnerabilities?

Your AI pulls security findings and specific CWE details from Veracode. It then provides direct remediation steps to fix the flaws. You get a clear path to patching your code.

The outcomes.

Where your fixes land.

The AI processes your Veracode data into these specific results.

TRIAGE

A prioritized list

The AI pulls your active security findings. You get a clear view of what needs attention.

ANALYSIS

Deep flaw details

The AI retrieves specific CWE information for each finding. You see the exact nature of the vulnerability.

REMEDIATION

Direct fix steps

The AI generates remediation instructions based on the flaw details. You get the logic needed to patch the code.

HUMAN

Manual code review

The AI provides the fix plan, but you must review and apply it. You remain responsible for the final code changes.

The workflow

What your AI does when the data arrives.

The AI handles the data retrieval so you can focus on the fix.

  1. Fetch findings

    The AI scans your Veracode account to identify all current security issues.

    list_security_findings
  2. Inspect flaws

    The AI looks into a specific finding to pull the relevant CWE data.

    get_finding_details
  3. Generate fixes

    The AI uses the finding details to draft remediation steps for your code.

    get_finding_details
  4. Verify details

    The AI re-checks the finding details to ensure the suggested fix is accurate.

    get_finding_details

Try it

Copy these to start.

Paste these into your chat to begin.

Starting points

Replace the bracketed text with your specific repo or finding ID.

Veracode Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_ouSVtPeDCUVttGmj9FxRQS1WO3untKs29VHwWYZI/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Veracode capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "veracode-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_ouSVtPeDCUVttGmj9FxRQS1WO3untKs29VHwWYZI/mcp"
    }
  }
}
Copy into chat04
  • List all my security findings from Veracode.

  • Get the details for the CWE flaw in my [repo-name] repository.

  • Show me the remediation steps for finding ID [12345].

  • What are the specific CWE details for the finding in my [project-name] app?

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect Veracode once, then ask.

Connect your account via the link below. Your login stays encrypted on our side, and you can start working immediately.

Connect Veracode to your AI

FAQ

How this task behaves

  • 01

    Can the AI automatically fix the code in my repo?

    No. The AI provides the remediation steps, but you must review and apply the changes yourself.

  • 02

    Can the AI delete findings from Veracode?

    No. The tools only allow the AI to read findings and their details. It cannot modify or delete any data in Veracode.

  • 03

    Does the AI see all my Veracode data?

    No. The AI only accesses the specific findings you ask it to list or inspect.

  • 04

    Can I use this with Cursor or VS Code?

    Yes. You can use this with any MCP-compatible client, including Cursor and VS Code.

  • 05

    Will the AI identify the CWE for a finding?

    Yes. By pulling the finding details, the AI can identify the specific CWE associated with a flaw.

  • More questions about Veracode? The Connector page answers them. See everything the Veracode Connector can do

Connect Veracode to Claude, Cursor, ChatGPT & more