# Veracode MCP

## Quick Start

**1. Install**

```bash
pip install -r requirements.txt
```

**2. Add credentials to `.env`**

```env
VERACODE_API_ID=your_api_id
VERACODE_API_KEY=your_api_key
```

> Get these from Veracode Platform → **My Profile → API Credentials**

**3. Add to `.cursor/mcp.json`**

```json
{
  "mcpServers": {
    "veracode": {
      "command": "python",
      "args": ["server.py"],
      "cwd": "C:/path/to/veracode-mcp"
    }
  }
}
```

> Set `cwd` to the full path of the `veracode-mcp` folder on your machine.  
> Examples:
> - Windows: `"cwd": "C:/Users/you/veracode-mcp"`
> - macOS/Linux: `"cwd": "/home/you/veracode-mcp"`
>
> Not sure of the path? Run this in your terminal to print it:
> ```bash
> # Windows (PowerShell)
> (Get-Item .\veracode-mcp).FullName
>
> # macOS / Linux
> realpath ./veracode-mcp
> ```

Restart Cursor — that's it. Ask Cursor to run a Veracode scan and it will use the tools automatically.

---

## What you can ask Cursor

- *"List my Veracode applications"*
- *"Zip the bin folder and run a SAST scan on app 12345"*
- *"Wait for the scan to finish and show me the findings"*
- *"Show me SCA vulnerabilities from the last scan"*
- *"List my SCA workspaces and get CVEs for my project"*