Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning with Cycode.
Cycode mcp server lets Claude, Cursor and other MCP clients work with Cycode directly. Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning with Cycode.
The Cycode Command Line Interface (CLI) is an application you can install locally to scan your repositories for secrets, infrastructure as code misconfigurations, software composition analysis vulnerabilities, and static application security testing issues.
cycode auth command to authenticate to Cycode with the CLI - Alternatively, you can get a Cycode Client ID and Client Secret Key by following the stepsstatus — Show the CLI status and exit.cycode_secret_scan — Scan for hardcoded secretscycode_sca_scan — Scan for Software Composition Analysis (SCA) - vulnerabilities and license issuescycode_iac_scan — Scan for Infrastructure as Code (IaC) misconfigurationscycode_sast_scan — Scan for Static Application Security Testing (SAST) - code quality and security flawscycode_status — Get Cycode CLI version, authentication status, and configuration informationCompare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| cycode_secret_scan | Scan for hardcoded secrets |
| cycode_sca_scan | Scan for Software Composition Analysis (SCA) - vulnerabilities and license issues |
| cycode_iac_scan | Scan for Infrastructure as Code (IaC) misconfigurations |
| cycode_sast_scan | Scan for Static Application Security Testing (SAST) - code quality and security flaws |
| cycode_status | Get Cycode CLI version, authentication status, and configuration information |
{
"mcpServers": {
"cycode": {
"command": "cycode",
"args": [
"mcp"
],
"env": {
"CYCODE_CLIENT_ID": "your-cycode-id",
"CYCODE_CLIENT_SECRET": "YOUR_CYCODE_CLIENT_SECRET",
"CYCODE_API_URL": "https://api.cycode.com",
"CYCODE_APP_URL": "https://app.cycode.com"
}
}
}
}From the project documentation. Replace placeholders and example paths before connecting.
cycode auth command to authenticate to Cycode with the CLI - Alternatively, you can get a Cycode Client ID and Client Secret Key by following the steps| Variable | Description | Required |
|---|---|---|
| CYCODE_CLIENT_ID | Declared in the maintainer’s client configuration. | Check documentation |
| CYCODE_CLIENT_SECRET | Declared in the maintainer’s client configuration. | Check documentation |
| CYCODE_API_URL | Declared in the maintainer’s client configuration. | Check documentation |
| CYCODE_APP_URL | Declared in the maintainer’s client configuration. | Check documentation |
Stop letting your assistant hallucinate n8n node parameters — this server hands it the real schemas, templates and validation.
AWS Labs' official server suite — current AWS docs, CDK guidance, cost analysis and service tools.
Cloud browsers for AI agents — automation sessions that run in Browserbase's fleet, not on your machine.
Workers, KV, R2 and D1 by conversation — Cloudflare's official remote servers for building and observability.
Dashboards, Prometheus and Loki queries, incidents and alerts — observability by conversation.
kubectl with a conversational interface — inspect pods, read logs, diagnose clusters and manage workloads.