HCL AppScan Connector for AI agents.
10 live capabilities
Manage application security scans and vulnerabilities from your chat interface.
Waiting for input…
Why people use HCL AppScan
HCL AppScan for Automated Vulnerability Management
With this Connector, you can just ask your agent to 'find all high-severity issues for our login portal.' It pulls the data, summarizes it, and gives you a to-do list in seconds. You get a clear view of your risks without the manual overhead.
What Vinkius changes
You get a direct line from your chat interface to your security testing data.
Use it from Claude, ChatGPT, Cursor or another AI client you already have.
One account · 5,900+ Connectors
- Real-world use case 01
Summarizing high-risk bugs
A security engineer asks their agent to find all high-severity issues for the 'Payment Gateway'.
- Real-world use case 02
Triggering scans during deployment
A DevSecOps engineer wants to run a test on a new staging URL.
- Real-world use case 03
Audit proof for compliance
A compliance officer asks for a list of all scans performed in the last month.
Complete set · 10capabilities
The complete HCL AppScan capability set.
These are the exact actions your AI can choose when you ask it to work with HCL AppScan.
01—04
4 capabilities in this set.
Part of 10 available through HCL AppScan.
- 01 Capability
Get account check
Confirm your connection to HCL AppScan is active and working. This ensures your agent has the right access to pull your data.
- 02 Capability
Get app
Fetch specific metadata for a single application in your inventory. This is useful for getting unique IDs or basic app details.
- 03 Capability
Get issue
Get the full details of a specific security vulnerability. Use this to see the exact nature of a bug and its severity level.
- 04 Capability
Get scan
Check the current status and results of a specific security scan. This helps you monitor real-time progress without leaving your interface.
05—07
3 capabilities in this set.
Part of 10 available through HCL AppScan.
- 05 Capability
Get account info
Pull the basic details of the authenticated user account. Use this to verify which user profile the agent is currently using.
- 06 Capability
List apps
See every application currently registered in your security inventory. This helps you quickly find the right app to audit or scan.
- 07 Capability
List issues
Pull a list of all vulnerabilities found for a specific application. Use this to identify which security bugs need to be fixed first.
08—10
3 capabilities in this set.
Part of 10 available through HCL AppScan.
- 08 Capability
List presence
View the local agents available for scanning your internal apps. This shows you which hardware is ready to run your tests.
- 09 Capability
List scans
View a history of all scans performed within your account. Use this to track past results and historical security data.
- 10 Capability
Start dast scan
Kick off a new dynamic analysis scan for a target web application. This lets you start new security tests directly from the chat.
Set up in minutes
One URL. Then ask HCL AppScan to work.
Claude and ChatGPT only need the Connector URL. Copy it once, add it in settings, and use HCL AppScan from the conversation.
Choose your client
Live previewAdvanced clients IDE · CLI
Claude · Web + desktop
Connector URL · ready to paste
Streamable HTTPhttps://edge.vinkius.com/vk_preview_mYfPAvMiXfAXuaYYaGV3n5T9Sji2RICkXrcN7Ich/mcp - Step 01
Open Connectors
In Claude Web or Claude Desktop, open Settings and choose Connectors.
- Step 02
Add the URL
Choose Add custom connector, name it HCL AppScan, and paste the URL above.
- Step 03
Turn it on in chat
Select +, open Connectors, and enable HCL AppScan for the conversation.
ChatGPT · Web + desktop
Connector URL · ready to paste
Streamable HTTPhttps://edge.vinkius.com/vk_preview_mYfPAvMiXfAXuaYYaGV3n5T9Sji2RICkXrcN7Ich/mcp - Step 01
Open MCP settings
On desktop, open Settings and MCP servers. On web, open your workspace app or connector settings.
- Step 02
Add the URL
Choose Add server with Streamable HTTP, or create a custom MCP app, then paste the HCL AppScan URL.
- Step 03
Save and start
Save the connection and enable HCL AppScan in your conversation. Desktop may ask you to restart once.
Cursor · IDE configuration
Advanced setup
{
"mcpServers": {
"hcl-appscan": {
"url": "https://edge.vinkius.com/vk_preview_mYfPAvMiXfAXuaYYaGV3n5T9Sji2RICkXrcN7Ich/mcp"
}
}
}- Step 01
Open MCP Settings
Press Cmd+Shift+P (macOS) or Ctrl+Shift+P (Windows/Linux) → search "MCP Settings"
- Step 02
Add the server config
Paste the JSON configuration above into the mcp.json file that opens
- Step 03
Save the file
Cursor will automatically detect the new Connector
- Step 04
Start using HCL AppScan
Open Agent mode in chat and ask: "Using HCL AppScan, help me...". 10 tools available
VS Code Copilot · IDE configuration
Advanced setup
{
"mcpServers": {
"hcl-appscan": {
"url": "https://edge.vinkius.com/vk_preview_mYfPAvMiXfAXuaYYaGV3n5T9Sji2RICkXrcN7Ich/mcp"
}
}
}- Step 01
Create MCP config
Create a .vscode/mcp.json file in your project root
- Step 02
Add the server config
Paste the JSON configuration above
- Step 03
Enable Agent mode
Open GitHub Copilot Chat and switch to Agent mode using the dropdown
- Step 04
Start using HCL AppScan
Ask Copilot: "Using HCL AppScan, help me...". 10 tools available
Windsurf · IDE configuration
Advanced setup
{
"mcpServers": {
"hcl-appscan": {
"url": "https://edge.vinkius.com/vk_preview_mYfPAvMiXfAXuaYYaGV3n5T9Sji2RICkXrcN7Ich/mcp"
}
}
}- Step 01
Open MCP Settings
Go to Settings → MCP Configuration or press Cmd+Shift+P and search "MCP"
- Step 02
Add the server
Paste the JSON configuration above into mcp_config.json
- Step 03
Save and reload
Windsurf will detect the new server automatically
- Step 04
Start using HCL AppScan
Open Cascade and ask: "Using HCL AppScan, help me...". 10 tools available
Cline · IDE configuration
Advanced setup
{
"mcpServers": {
"hcl-appscan": {
"url": "https://edge.vinkius.com/vk_preview_mYfPAvMiXfAXuaYYaGV3n5T9Sji2RICkXrcN7Ich/mcp"
}
}
}- Step 01
Open Cline MCP Settings
Click the Connectors icon in the Cline sidebar panel
- Step 02
Add remote server
Click "Add Connector" and paste the configuration above
- Step 03
Enable the server
Toggle the server switch to ON
- Step 04
Start using HCL AppScan
Ask Cline: "Using HCL AppScan, help me...". 10 tools available
Claude Code · Terminal command
Advanced setup
claude mcp add hcl-appscan --transport http "https://edge.vinkius.com/vk_preview_mYfPAvMiXfAXuaYYaGV3n5T9Sji2RICkXrcN7Ich/mcp"- Step 01
Install Claude Code
Run npm install -g @anthropic-ai/claude-code if not already installed
- Step 02
Add the Connector
Run the command above in your terminal
- Step 03
Verify the connection
Run claude mcp to list connected servers, or type /mcp inside a session
- Step 04
Start using HCL AppScan
Ask Claude: "Using HCL AppScan, show me...". 10 tools are ready
Where the request belongs
Work HCL AppScan can move forward.
This is for security engineers and DevSecOps teams who are tired of manual data exports and constant dashboard switching to manage application security.
Security Engineer
Audits security findings across 50+ applications on a Tuesday afternoon without manual CSV exports.
DevSecOps Engineer
Triggers new DAST scans for production web apps during a deployment cycle using natural language commands.
Compliance Officer
Verifies that every application in the company inventory has a recent security scan on file.
Build the capability set
Add more capabilities.
Each Connector adds new actions and data without changing how you work.
Browse ConnectorsAcunetix 360
Automated web vulnerability scanning. manage scans, track issues, and audit security via AI.
Beagle Security
Scan your web applications for vulnerabilities, generate penetration test reports, and strengthen your security posture proactively.
Checkmarx
Automate AppSec via Checkmarx One. trigger core scans, analyze vulnerabilities, discover Best Fix Locations (BFL), and monitor KICS results.
42Crunch
Automate API security testing via 42Crunch. manage collections, trigger audits, run conformance scans, and retrieve security reports directly from any AI agent.
StackHawk
Connect your AI to the StackHawk DAST platform. Run automated security scans, triage alerts seamlessly, and find vulnerabilities effortlessly.
Contrast Security
Equip your AI with Contrast Security AppSec data to monitor applications and hunt critical vulnerabilities directly via chat.
Bring your own AI
Change the model, client or framework. Keep HCL AppScan connected.
-
Claude -
ChatGPT -
Gemini -
Cursor -
VS Code -
Windsurf -
ZCode -
Cline -
Zed -
Continue -
Kiro -
Roo Code -
Zencoder -
Goose -
Void -
Augment Code -
Amp -
Qodo -
Tabnine -
Pieces -
Sourcegraph Cody -
JetBrains -
Warp -
Amazon Q -
Antigravity -
BoltAI -
Raycast -
Jan -
LM Studio -
AnythingLLM -
Open WebUI -
Msty -
Cherry Studio -
LibreChat -
TypingMind -
Chorus -
5ire -
n8n -
LangChain -
LlamaIndex -
CrewAI -
Vercel AI SDK
Before you connect
Questions about HCL AppScan.
The practical details behind the request, access and result.
Does HCL AppScan MCP help with DAST scans?
Yes, this Connector allows your AI client to start new dynamic analysis (DAST) scans and monitor their progress in real-time.
Can I see all my applications in one list with HCL AppScan MCP?
Yes, you can ask your agent to list every application currently registered in your security inventory for a quick overview.
How do I find specific bugs using HCL AppScan MCP?
You can ask your agent to list issues for a specific application. It will pull the vulnerabilities and summarize them for you.
Does HCL AppScan MCP work with HCL AppScan on Cloud?
Yes, it is specifically designed to connect with HCL AppScan on Cloud (ASoC) to manage your security posture.
Can I start scans automatically with HCL AppScan MCP?
Yes, your AI client can trigger new DAST scans directly through your chat interface whenever you need them.
How do I know if my account is connected to HCL AppScan MCP?
You can simply ask your agent to check your account connection status. It will verify that your connection is active and authorized.
How do I get my AppScan API Key ID and Secret?
Log in to the AppScan on Cloud console, go to your User Profile (top right), and select API Keys. You can generate a new Key ID and Key Secret there.
Does this server support the EU region?
Yes, you can configure the APPSCAN_REGION environment variable to eu to connect to the European data center (eu.cloud.appscan.com).
Can I start a scan for an internal application?
Yes, provided you have an AppScan Presence (local agent) configured. You can use the list_presence capability to check their availability before starting a scan.
One connection away
Give your agent a direct line to HCL AppScan.
Connect HCL AppScan once. Keep it beside 5,900+ managed Connectors when the next task needs more.
Explore every Connector No credit card required · Free tier available