Cycode Security Scanner Logo

Cycode Security Scanner

Official

Integrates with Cycode's security platform to perform automated SAST, SCA, IaC, and secrets scanning...

154 views
0 installs
Updated Nov 22, 2025
Not audited
Integrates with Cycode's security platform to perform automated SAST, SCA, IaC, and secrets scanning on local files, Git repositories, and commit ranges with detailed vulnerability reports and remediation guidance.
  1. Log in to the Cycode Portal

    • Go to https://app.cycode.com (or your organization’s custom Cycode App URL).
    • Log in with your credentials.
  2. Obtain Your Client ID and Client Secret

    • You can use either a Personal Access Token (PAT) or a Service Account for automation (recommended).

    • For a Personal Access Token:

      • Go to SettingsPersonal Access Tokens in the Cycode portal.
      • Click “Generate Token” and follow the steps to copy your Client ID and Client Secret.
    • For a Service Account:

      (Links and details for account and token management are in the README, see also official docs for details.)

  3. Copy Cycode API and App URLs

    • Use the default values unless instructed otherwise by your Cycode admin:
      • CYCODE_API_URL: https://api.cycode.com
      • CYCODE_APP_URL: https://app.cycode.com
    • For EU environments, use:
      • CYCODE_API_URL: https://api.eu.cycode.com
      • CYCODE_APP_URL: https://app.eu.cycode.com
  4. Add Credentials in FastMCP Connection Interface

    • In the FastMCP “Install Now” button or connection interface, fill in the following fields with your copied values:
      • CYCODE_CLIENT_ID: Your Cycode Client ID
      • CYCODE_CLIENT_SECRET: Your Cycode Secret Key
      • CYCODE_API_URL: https://api.cycode.com (or EU/non-default if required)
      • CYCODE_APP_URL: https://app.cycode.com (or EU/non-default if required)
    • Save or apply the changes.
  5. Test the Integration

    • Once installation is complete, use MCP-enabled tools to run a test scan or check the connection.

References:

Tip: The recommended and most secure way is to use a Service Account. Use Personal Access Tokens for personal automation only.

Quick Start

View on GitHub

More for Security

View All →

More for Developer Tools

View All →

Report Issue

Thank you! Your issue report has been submitted successfully.