Does Checkmarx have an MCP server?
Checkmarx maintains an official MCP server.
Needs an active Checkmarx One tenant; the server lives on your region's Checkmarx One host.
- Access
- Built into the product
- Endpoint
- <cxone-base-url>/api/security-mcp/mcp — per-instance endpoint
- Category
- Developer Tools
The receipts
Ships inside Checkmarx's own product rather than as a standalone server. Documented at docs.checkmarx.com.
Connect it
Ships inside the vendor's own app or CLI rather than as a standalone download.
Add it from the terminal, then restart your session:
claude mcp add checkmarx -- npx -y <package-from-readme>Swap in the exact package and flags from the package page — most servers need an API key passed as an environment variable.
Add --scope user to make it available in every project.
Open Settings → Developer → Edit Config and add the server to claude_desktop_config.json:
{
"mcpServers": {
"checkmarx": {
"command": "npx",
"args": [
"-y",
"<package-from-readme>"
],
"env": {
"API_KEY": "…"
}
}
}
}Restart Claude Desktop after saving.
Add to .cursor/mcp.json in your project, or ~/.cursor/mcp.json for
every project:
{
"mcpServers": {
"checkmarx": {
"command": "npx",
"args": [
"-y",
"<package-from-readme>"
],
"env": {
"API_KEY": "…"
}
}
}
}A green dot in Settings → MCP means it connected.
Add to .vscode/mcp.json:
{
"servers": {
"checkmarx": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"<package-from-readme>"
]
}
}
}Then pick the server from the tools menu in Copilot's agent mode.
Questions
Does Checkmarx have an official MCP server?
Yes. Checkmarx maintains an official MCP server.
How do I connect Checkmarx to Claude?
Run the server locally and register it in Claude's MCP config. In Claude Code that's a single "claude mcp add" command; in Claude Desktop you add it to claude_desktop_config.json.
How is this verdict verified?
Published to the MCP Registry under Checkmarx's verified namespace com.checkmarx with a per-tenant URL; docs.checkmarx.com documents the MCP server at <host>/api/security-mcp/mcp, and the US and EU hosts (ast.checkmarx.net, eu.ast.checkmarx.net) answer MCP initialize (401). GitHub metadata is refreshed every six hours.
How we know
Published to the MCP Registry under Checkmarx's verified namespace com.checkmarx with a per-tenant URL; docs.checkmarx.com documents the MCP server at <host>/api/security-mcp/mcp, and the US and EU hosts (ast.checkmarx.net, eu.ast.checkmarx.net) answer MCP initialize (401).
- GitHub data refreshed on 2026-10-14, and again every six hours.
- Vendor docs checked by hand on 2026-09-29.
Spotted something out of date? Tell us — corrections ship same-day.