Cycode Security Scanner Logo

Cycode Security Scanner

Official

Integrates with Cycode's security platform to perform automated SAST, SCA, IaC, and secrets scanning...

70 views
0 installs
Updated Sep 9, 2025
Not audited
Integrates with Cycode's security platform to perform automated SAST, SCA, IaC, and secrets scanning on local files, Git repositories, and commit ranges with detailed vulnerability reports and remediation guidance.
  1. Log in to the Cycode Portal

    • Go to https://app.cycode.com (or your organization’s custom Cycode App URL).
    • Log in with your credentials.
  2. Obtain Your Client ID and Client Secret

    • You can use either a Personal Access Token (PAT) or a Service Account for automation (recommended).

    • For a Personal Access Token:

      • Go to SettingsPersonal Access Tokens in the Cycode portal.
      • Click “Generate Token” and follow the steps to copy your Client ID and Client Secret.
    • For a Service Account:

      (Links and details for account and token management are in the README, see also official docs for details.)

  3. Copy Cycode API and App URLs

    • Use the default values unless instructed otherwise by your Cycode admin:
      • CYCODE_API_URL: https://api.cycode.com
      • CYCODE_APP_URL: https://app.cycode.com
    • For EU environments, use:
      • CYCODE_API_URL: https://api.eu.cycode.com
      • CYCODE_APP_URL: https://app.eu.cycode.com
  4. Add Credentials in FastMCP Connection Interface

    • In the FastMCP “Install Now” button or connection interface, fill in the following fields with your copied values:
      • CYCODE_CLIENT_ID: Your Cycode Client ID
      • CYCODE_CLIENT_SECRET: Your Cycode Secret Key
      • CYCODE_API_URL: https://api.cycode.com (or EU/non-default if required)
      • CYCODE_APP_URL: https://app.cycode.com (or EU/non-default if required)
    • Save or apply the changes.
  5. Test the Integration

    • Once installation is complete, use MCP-enabled tools to run a test scan or check the connection.

References:

Tip: The recommended and most secure way is to use a Service Account. Use Personal Access Tokens for personal automation only.

Quick Start

View on GitHub

More for Security

View All →

More for Developer Tools

View All →

Similar MCP Servers

S

Security Scanner

Performs comprehensive security analysis of code repositories by detecting exposed secrets, vulnerabilities, dependency issues, and configuration problems using regex patterns and vulnerability detection algorithms.

Security Developer Tools
Semgrep

Semgrep

Official Remote Remote

Integrates with Semgrep's static analysis engine to scan code for security vulnerabilities and coding issues, enabling developers to identify and fix potential problems directly within their coding workflow.

Security Developer Tools
D

DeepSource

Integrates with DeepSource's code quality platform to provide access to project metrics, issues, and analysis results for monitoring and troubleshooting code quality directly in conversations.

Security Developer Tools
126
2

Report Issue

Thank you! Your issue report has been submitted successfully.