Veracode

Provides Veracode data via MCP: list apps, findings, scan status, and policy compliance.

javascript

0

GitHub Stars

javascript

Language

4 months ago

First Indexed

2 months ago

Catalog Refreshed

Documentation & install

Readme and setup notes from the catalogue, plus a client-ready config you can copy for your MCP host.

Installation

Add the following to your MCP client configuration file.

Configuration

View docs

{
  "mcpServers": {
    "landscapedotcl-mcp-veracode": {
      "command": "npx",
      "args": [
        "-y",
        "github:landscapedotcl/mcp-veracode"
      ],
      "env": {
        "VERACODE_API_ID": "YOUR_API_ID",
        "VERACODE_API_SECRET": "YOUR_API_SECRET"
      }
    }
  }
}

You can query Veracode data directly from Claude Code by using the MCP server dedicated to Veracode. This server lets you list applications, inspect findings, check scan status, and verify policy compliance through simple function calls, all secured with Veracode credentials.

How to use

To work with this MCP server, use your MCP client to call the available functions. Each function corresponds to a Veracode API capability and returns structured data you can use in your Claude Code workflows.

How to install

Prerequisites you need before installing this MCP server:

Install the MCP configuration example

{
  "mcpServers": {
    "veracode-mcp": {
      "command": "npx",
      "args": ["-y", "github:landscapedotcl/mcp-veracode"],
      "env": {
        "VERACODE_API_ID": "tu_api_id",
        "VERACODE_API_SECRET": "tu_api_secret"
      }
    }
  }
}

Restart and verification

After adding the MCP server configuration, restart Claude Code to load the new MCP server. Then you can start making calls like veracode_applications, veracode_findings, veracode_scan_status, and veracode_policy_compliance.

Security and authentication notes

Use HMAC-SHA-256 with your Veracode API ID and API Secret to authenticate requests, following Veracode’s standard method. Generate credentials in Veracode under Account Settings > API Credentials.

Usage examples

# List applications
veracode_applications({ name: "mi-app" })

# Findings for an application
veracode_findings({ applicationGuid: "guid-aqui", scanType: "STATIC", severityGte: 3 })

# Scan status for an application
veracode_scan_status({ applicationGuid: "guid-aqui" })

# Compliance with policy
veracode_policy_compliance({ policyCompliance: "DID_NOT_PASS" })

Available tools

veracode_applications

List and search Veracode applications.

veracode_findings

Retrieve vulnerabilities and flaws for a specific application.

veracode_scan_status

Check the status of scans and view a summary report.

veracode_policy_compliance

Check whether an application adheres to defined policies.