Checkmarx MCP server
{
"mcpServers": {
"checkmarx": {
"type": "http",
"url": "https://{cxone_base_url}/api/security-mcp/mcp/{tenant_id}"
}
}
}{
"mcpServers": {
"checkmarx": {
"type": "http",
"url": "https://{cxone_base_url}/api/security-mcp/mcp/{tenant_id}"
}
}
}{
"mcpServers": {
"checkmarx": {
"type": "http",
"url": "https://{cxone_base_url}/api/security-mcp/mcp/{tenant_id}"
}
}
}{
"servers": {
"checkmarx": {
"type": "http",
"url": "https://{cxone_base_url}/api/security-mcp/mcp/{tenant_id}"
}
}
}{
"mcpServers": {
"checkmarx": {
"type": "http",
"url": "https://{cxone_base_url}/api/security-mcp/mcp/{tenant_id}"
}
}
}file .mcp.json (in your project root)file claude_desktop_config.jsonfile ~/.cursor/mcp.jsonfile .vscode/mcp.jsonfile ~/.codeium/windsurf/mcp_config.jsonversion 1.0.0
What it does
An MCP server that integrates Checkmarx One application security scanning into AI coding assistants like Claude, Cursor, and Copilot. Developers can scan projects, review security findings, and generate remediations directly through their AI client.
- Trigger security scans on code projects and review findings without leaving your AI assistant.
- Ask your AI assistant to investigate specific vulnerabilities and their impact on your codebase.
- Request AI-generated fixes for identified security issues and apply them to your code.
Tools this server exposes
| Tool | Does |
|---|---|
| scan_project | Scan a Checkmarx project and retrieve security findings. |
| get_findings | Retrieve and investigate security findings from a project. |
| remediate_finding | Generate AI-assisted remediation suggestions for security findings. |
| manage_projects | Manage Checkmarx projects including creation and configuration. |
Before you enable it
An MCP server runs with whatever access you give it. Start with a development account rather than production, and check which tools the server exposes before you let an agent call them unattended.