- TRIAGE
- ANALYSIS
- REMEDIATION
- HUMAN
Short answer
How can I use my AI to fix Veracode vulnerabilities?
Your AI pulls security findings and specific CWE details from Veracode. It then provides direct remediation steps to fix the flaws. You get a clear path to patching your code.
The outcomes.
Where your fixes land.
The AI processes your Veracode data into these specific results.
TRIAGE
A prioritized list
The AI pulls your active security findings. You get a clear view of what needs attention.
ANALYSIS
Deep flaw details
The AI retrieves specific CWE information for each finding. You see the exact nature of the vulnerability.
REMEDIATION
Direct fix steps
The AI generates remediation instructions based on the flaw details. You get the logic needed to patch the code.
HUMAN
Manual code review
The AI provides the fix plan, but you must review and apply it. You remain responsible for the final code changes.
The workflow
What your AI does when the data arrives.
The AI handles the data retrieval so you can focus on the fix.
Fetch findings
The AI scans your Veracode account to identify all current security issues.
list_security_findingsInspect flaws
The AI looks into a specific finding to pull the relevant CWE data.
get_finding_detailsGenerate fixes
The AI uses the finding details to draft remediation steps for your code.
get_finding_detailsVerify details
The AI re-checks the finding details to ensure the suggested fix is accurate.
get_finding_details
Try it
Copy these to start.
Paste these into your chat to begin.
Starting points
Replace the bracketed text with your specific repo or finding ID.
Veracode Connector
You're all set. Choose your MCP client and follow the setup instructions.
https://edge.vinkius.com/vk_preview_ouSVtPeDCUVttGmj9FxRQS1WO3untKs29VHwWYZI/mcpClaude Desktop
Follow the steps below to connect in seconds.
- 1In Claude Desktop, open Settings → Connectors.
- 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
- 3Click Add and start a new chat — Veracode capabilities are ready to use.
{
"mcpServers": {
"veracode-mcp": {
"url": "https://edge.vinkius.com/vk_preview_ouSVtPeDCUVttGmj9FxRQS1WO3untKs29VHwWYZI/mcp"
}
}
}List all my security findings from Veracode.
Get the details for the CWE flaw in my [repo-name] repository.
Show me the remediation steps for finding ID [12345].
What are the specific CWE details for the finding in my [project-name] app?
Claude
ChatGPT
Cursor
VS Code
Windsurf
Claude Code
JetBrains
Cline
Start here
Connect Veracode once, then ask.
Connect your account via the link below. Your login stays encrypted on our side, and you can start working immediately.
Connect Veracode to your AIFAQ
How this task behaves
- 01
Can the AI automatically fix the code in my repo?
No. The AI provides the remediation steps, but you must review and apply the changes yourself.
- 02
Can the AI delete findings from Veracode?
No. The tools only allow the AI to read findings and their details. It cannot modify or delete any data in Veracode.
- 03
Does the AI see all my Veracode data?
No. The AI only accesses the specific findings you ask it to list or inspect.
- 04
Can I use this with Cursor or VS Code?
Yes. You can use this with any MCP-compatible client, including Cursor and VS Code.
- 05
Will the AI identify the CWE for a finding?
Yes. By pulling the finding details, the AI can identify the specific CWE associated with a flaw.
More questions about Veracode? The Connector page answers them. See everything the Veracode Connector can do
Connect Veracode to Claude, Cursor, ChatGPT & more
