Skip to content
Vinkius

Checkmarx Connector for AI agents.

10 live capabilities

Automate vulnerability triage and SAST scanning within your development workflow.

Live agent request Checkmarx / Connector

Waiting for input…

AI Agent

Why people use Checkmarx

Checkmarx for Faster Vulnerability Triage in AppSec

This Connector lets you stay in your agent. You can ask for the top 5 critical flaws and get the exact file paths and lines of code instantly. You move from discovery to remediation in one conversation.

  • Claude
  • ChatGPT
  • Gemini
  • Cursor
  • Visual Studio Code
  • Windsurf

What Vinkius changes

You get a direct command line to your security scans and vulnerability data without leaving your chat interface.

Use it from Claude, ChatGPT, Cursor or another AI client you already have.

One account · 5,900+ Connectors

  1. Real-world use case 01

    Triage a new security alert

    A security engineer asks the agent to list the most severe flaws in the last scan and then pulls the best fix location for the top three.

  2. Real-world use case 02

    Pre-deployment IaC check

    A DevOps engineer asks the agent to check KICS results for a new Terraform branch to catch misconfigurations before merging.

  3. Real-world use case 03

    Rapid bug fixing

    A developer finds a SQL injection and asks the agent to find the best fix location so they can rewrite the sanitization logic immediately.

Complete set · 10capabilities

The complete Checkmarx capability set.

These are the exact actions your AI can choose when you ask it to work with Checkmarx.

Capability set01 / 03

01—04

4 capabilities in this set.

Part of 10 available through Checkmarx.

  1. 01 Capability

    List projects

    View all projects, their metadata, and their assigned application links.

  2. 02 Capability

    Get project

    Pull specific details for a project to ensure you're scanning the right branch.

  3. 03 Capability

    Get kics results

    Fetch infrastructure-specific findings like Terraform or Kubernetes misconfigurations.

  4. 04 Capability

    List applications

    See all applications and their aggregated risk metrics in your environment.

Capability set02 / 03

05—07

3 capabilities in this set.

Part of 10 available through Checkmarx.

  1. 05 Capability

    List scans

    See a history of all active and completed scans for a project.

  2. 06 Capability

    Run scan

    Start a new code scan and get the ID for tracking.

  3. 07 Capability

    Get scan details

    Check the status and engine results of a specific scan.

Capability set03 / 03

08—10

3 capabilities in this set.

Part of 10 available through Checkmarx.

  1. 08 Capability

    Get scan results

    Download the full list of vulnerabilities and their locations from a finished scan.

  2. 09 Capability

    Cancel scan

    Stop an active scan to save resources or because you've pushed a new commit.

  3. 10 Capability

    List bfl

    Get the best fix location for a specific vulnerability based on a rule ID.

Set up in minutes

One URL. Then ask Checkmarx to work.

Claude and ChatGPT only need the Connector URL. Copy it once, add it in settings, and use Checkmarx from the conversation.

Choose your client

Live preview
Advanced clients IDE · CLI

Claude · Web + desktop

Official guide ↗

Connector URL · ready to paste

Streamable HTTP
https://edge.vinkius.com/vk_preview_thwJCCvAxQj2dRXly3vkJnbbHvTu7jJNcAvioyvo/mcp
  1. Step 01

    Open Connectors

    In Claude Web or Claude Desktop, open Settings and choose Connectors.

  2. Step 02

    Add the URL

    Choose Add custom connector, name it Checkmarx, and paste the URL above.

  3. Step 03

    Turn it on in chat

    Select +, open Connectors, and enable Checkmarx for the conversation.

Where the request belongs

Work Checkmarx can move forward.

Built around the request

For security engineers and DevOps folks who are tired of context-switching between security capabilities and their code editors. It's for the person who needs to move from finding a bug to fixing a bug as fast as possible.

01

AppSec Engineer

Triages high-severity vulnerabilities and maps them to specific lines of code during a sprint.

02

DevOps Engineer

Checks KICS results for Terraform and Kubernetes files before they hit production.

03

Software Developer

Gets the Best Fix Location (BFL) for a security bug and asks the agent to rewrite the code.

Build the capability set

Add more capabilities.

Each Connector adds new actions and data without changing how you work.

Browse Connectors
Veracode logo
01 10 capabilities

Veracode

Bring Veracode AppSec to your AI. Analyze source code flaws, extract application profiles, and track vulnerabilities conversationaly.

View Connector
HCL AppScan logo
02 10 capabilities

HCL AppScan

Manage security scans and vulnerabilities with HCL AppScan. track issues and audit applications via AI.

View Connector
Semgrep logo
03 10 capabilities

Semgrep

Equip your AI agent with read/write access to Semgrep's SAST platform to audit code security findings, update triage statuses, and enforce custom semantic rules.

View Connector
42Crunch logo
04 10 capabilities

42Crunch

Automate API security testing via 42Crunch. manage collections, trigger audits, run conformance scans, and retrieve security reports directly from any AI agent.

View Connector
StackHawk logo
05 10 capabilities

StackHawk

Connect your AI to the StackHawk DAST platform. Run automated security scans, triage alerts seamlessly, and find vulnerabilities effortlessly.

View Connector
Aikido Security logo
06 16 capabilities

Aikido Security

Query security vulnerabilities via Aikido. list open issues, check repositories, monitor cloud assets, and track compliance directly from any AI agent.

View Connector

Bring your own AI

Change the model, client or framework. Keep Checkmarx connected.

  • Claude
  • ChatGPT
  • Gemini
  • Cursor
  • VS Code
  • Windsurf
  • ZCode
  • Cline
  • Zed
  • Continue
  • Kiro
  • Roo Code
  • Zencoder
  • Goose
  • Void
  • Augment Code
  • Amp
  • Qodo
  • Tabnine
  • Pieces
  • Sourcegraph Cody
  • JetBrains
  • Warp
  • Amazon Q
  • Antigravity
  • BoltAI
  • Raycast
  • Jan
  • LM Studio
  • AnythingLLM
  • Open WebUI
  • Msty
  • Cherry Studio
  • LibreChat
  • TypingMind
  • Chorus
  • 5ire
  • n8n
  • LangChain
  • LlamaIndex
  • CrewAI
  • Vercel AI SDK

Before you connect

Questions about Checkmarx.

The practical details behind the request, access and result.

Can I use Checkmarx MCP to find where to fix a bug?

Yes, this Connector pulls Best Fix Location data directly. Your agent can tell you the exact line of code where a flaw lives and suggest the optimal spot to apply a patch.

Does Checkmarx MCP support Infrastructure as Code?

Yes, it includes KICS results. You can ask your agent to check for misconfigurations in your Terraform, Kubernetes YAMLs, and Dockerfiles.

How do I connect Checkmarx to my AI agent?

You can connect it by subscribing to the Connector via Vinkius and providing your Checkmarx One JWT Token. Once connected, your agent can perform all scan and triage actions.

Can I cancel a scan that is taking too long?

Yes, you can ask your agent to cancel an active scan. This helps you save resources if you've pushed a new commit that makes the current scan redundant.

Does this work with my existing Checkmarx One account?

Yes, this Connector is designed to connect to your existing Checkmarx One enterprise environment, giving your AI agent programmatic access to your existing security posture.

Can I see my Terraform misconfigurations?

Yes, by pulling KICS results, your agent can identify specific infrastructure misconfigurations in your Terraform files and report them back to you instantly.

How can the AI help me fix a vulnerability faster?

Once an issue is identified via scan results, ask your agent to pull the 'Best Fix Location' (BFL) using the query ID. Checkmarx mathematically finds the common root code block, and your AI can instantly rewrite that exact block to sanitize the flaw. You save hours tracing code paths.

Can the agent initiate a static code scan independently?

Yes! Tell the agent to 'Run a scan on project ID X targeting the main branch'. It initiates the analysis array natively across Checkmarx One engines. You can poll for completion status later and retrieve the new dataset directly via chat.

Does it segregate AppSec results from Cloud infrastructure flaws?

It does. Application flaws are pulled cleanly via get_scan_results, whereas misconfigurations tied to Docker, Kubernetes, or Terraform limits use a dedicated get_kics_results pipeline. The agent intrinsically separates the context for your DevOps team.

One connection away

Give your agent a direct line to Checkmarx.

Connect Checkmarx once. Keep it beside 5,900+ managed Connectors when the next task needs more.

Explore every Connector No credit card required · Free tier available