MCP Veracode
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@MCP Veracode show me high severity findings for the payment-gateway application"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
MCP Veracode
MCP server para consultar Veracode desde Claude Code.
Tools
Tool | Descripcion |
| Listar y buscar aplicaciones |
| Vulnerabilidades y flaws de una aplicacion |
| Estado de scans y summary report |
| Estado de cumplimiento de politicas |
Related MCP server: bd-skill
Instalacion
Agregar a ~/.claude/mcp.json:
{
"mcpServers": {
"veracode-mcp": {
"command": "npx",
"args": ["-y", "github:landscapedotcl/mcp-veracode"],
"env": {
"VERACODE_API_ID": "tu_api_id",
"VERACODE_API_SECRET": "tu_api_secret"
}
}
}
}Reiniciar Claude Code para que cargue el MCP server.
Autenticacion
Usa HMAC-SHA-256 con API ID y API Secret, el metodo estandar de Veracode.
Las credenciales se generan en Veracode > Account Settings > API Credentials.
Uso
# Listar aplicaciones
veracode_applications({ name: "mi-app" })
# Findings de una aplicacion
veracode_findings({ applicationGuid: "guid-aqui", scanType: "STATIC", severityGte: 3 })
# Estado de scans
veracode_scan_status({ applicationGuid: "guid-aqui" })
# Apps que no cumplen politica
veracode_policy_compliance({ policyCompliance: "DID_NOT_PASS" })Available Tools
4 toolsveracode_applicationsC
List and search Veracode application profiles
Inputs: name, policyCompliance, scanType, page, +1 more.
veracode_findingsC
Get vulnerability findings/flaws for a Veracode application
Inputs: applicationGuid (required), scanType, severity, severityGte, +5 more.
veracode_policy_complianceC
Check policy compliance status for Veracode applications
Inputs: applicationGuid, policyCompliance, page, size.
veracode_scan_statusC
Get scan status and summary report for a Veracode application
Inputs: applicationGuid (required).
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
TDQS
Scored across 4 tools
Each tool has a clearly distinct purpose targeting different aspects of the Veracode security platform: applications management, vulnerability findings, policy compliance, and scan status. There is no overlap or ambiguity between these four functions.
All tool names follow the exact same pattern: 'veracode_' prefix followed by a descriptive noun phrase (applications, findings, policy_compliance, scan_status). This creates perfect consistency and predictability across the toolset.
Four tools is a reasonable count for a security scanning platform interface, though it feels slightly minimal. The tools cover core functions but might benefit from additional operations like initiating scans or managing scan configurations.
The toolset provides good coverage for monitoring and reporting on Veracode security scans, including applications, findings, compliance, and status. However, there are minor gaps in action-oriented operations like initiating new scans or managing scan configurations that would complete the workflow.
Maintenance
Related MCP Connectors
Augments MCP Server - A comprehensive framework documentation provider for Claude Code
Zero-log MCP server with 49 tools for AI guardrails, secret scanning, MCP linting & EU compliance.
491One MCP server for all your MCP servers: code mode, per-tool permissions, approvals and audit.
Hosted Amazon Seller and Vendor MCP server for Claude, ChatGPT, Cursor, Codex, Gemini, Copilot.
Related MCP Servers
- AlicenseBqualityFmaintenanceAn MCP server for the OnSecurity API that allows Claude to query Rounds, Findings, Prerequisites, Blocks and Notifications.5MIT
- FlicenseNot gradedqualityNot gradedmaintenanceAn MCP server that provides Claude Code with access to Black Duck SCA for managing vulnerabilities, licenses, and policy violations through natural language. It enables users to query component risks and execute Black Duck Detect scans directly within their workspace.-
- AlicenseBqualityDmaintenanceThis MCP server transforms Claude into a comprehensive security analyst by providing access to 27 security tools across 21 APIs for vulnerability intelligence. It enables users to query multiple sources like NVD, EPSS, CISA KEV, and threat intelligence platforms in parallel to get correlated security insights and risk assessments for CVEs.281,766Apache 2.0

@repomend/mcpofficial
AlicenseNot gradedqualityDmaintenanceSecurity scanning MCP server that connects Claude to RepoMend findings, enabling vulnerability management and automated fix drafting.MIT