Skip to main content
Glama

MCP Veracode

MCP server para consultar Veracode desde Claude Code.

Tools

Tool

Descripcion

veracode_applications

Listar y buscar aplicaciones

veracode_findings

Vulnerabilidades y flaws de una aplicacion

veracode_scan_status

Estado de scans y summary report

veracode_policy_compliance

Estado de cumplimiento de politicas

Related MCP server: bd-skill

Instalacion

Agregar a ~/.claude/mcp.json:

{
  "mcpServers": {
    "veracode-mcp": {
      "command": "npx",
      "args": ["-y", "github:landscapedotcl/mcp-veracode"],
      "env": {
        "VERACODE_API_ID": "tu_api_id",
        "VERACODE_API_SECRET": "tu_api_secret"
      }
    }
  }
}

Reiniciar Claude Code para que cargue el MCP server.

Autenticacion

Usa HMAC-SHA-256 con API ID y API Secret, el metodo estandar de Veracode.

Las credenciales se generan en Veracode > Account Settings > API Credentials.

Uso

# Listar aplicaciones
veracode_applications({ name: "mi-app" })

# Findings de una aplicacion
veracode_findings({ applicationGuid: "guid-aqui", scanType: "STATIC", severityGte: 3 })

# Estado de scans
veracode_scan_status({ applicationGuid: "guid-aqui" })

# Apps que no cumplen politica
veracode_policy_compliance({ policyCompliance: "DID_NOT_PASS" })

Available Tools

4 tools
veracode_applicationsC

List and search Veracode application profiles

Inputs: name, policyCompliance, scanType, page, +1 more.

veracode_findingsC

Get vulnerability findings/flaws for a Veracode application

Inputs: applicationGuid (required), scanType, severity, severityGte, +5 more.

veracode_policy_complianceC

Check policy compliance status for Veracode applications

Inputs: applicationGuid, policyCompliance, page, size.

veracode_scan_statusC

Get scan status and summary report for a Veracode application

Inputs: applicationGuid (required).

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    TDQS

    B3.4/5.0

    Scored across 4 tools

    Disambiguation5/5

    Each tool has a clearly distinct purpose targeting different aspects of the Veracode security platform: applications management, vulnerability findings, policy compliance, and scan status. There is no overlap or ambiguity between these four functions.

    Naming Consistency5/5

    All tool names follow the exact same pattern: 'veracode_' prefix followed by a descriptive noun phrase (applications, findings, policy_compliance, scan_status). This creates perfect consistency and predictability across the toolset.

    Tool Count4/5

    Four tools is a reasonable count for a security scanning platform interface, though it feels slightly minimal. The tools cover core functions but might benefit from additional operations like initiating scans or managing scan configurations.

    Completeness4/5

    The toolset provides good coverage for monitoring and reporting on Veracode security scans, including applications, findings, compliance, and status. However, there are minor gaps in action-oriented operations like initiating new scans or managing scan configurations that would complete the workflow.

    Maintenance

    ActivityInactive
    ResponsivenessNo recent community issues

    Related MCP Connectors

    Related MCP Servers

    • F
      license
      Not graded
      quality
      Not graded
      maintenance
      An MCP server that provides Claude Code with access to Black Duck SCA for managing vulnerabilities, licenses, and policy violations through natural language. It enables users to query component risks and execute Black Duck Detect scans directly within their workspace.
      -
    • A
      license
      B
      quality
      D
      maintenance
      This MCP server transforms Claude into a comprehensive security analyst by providing access to 27 security tools across 21 APIs for vulnerability intelligence. It enables users to query multiple sources like NVD, EPSS, CISA KEV, and threat intelligence platforms in parallel to get correlated security insights and risk assessments for CVEs.
      28
      1,766
      Apache 2.0
    • A
      license
      Not graded
      quality
      D
      maintenance
      Security scanning MCP server that connects Claude to RepoMend findings, enabling vulnerability management and automated fix drafting.
      MIT