Cycode

创建者

Cycode Ltd.a year ago

Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning

# cycode

# code

概览内容工具评论

概览

MCP Command [EXPERIMENT]

WARNING

The MCP command is available only for Python 3.10 and above. If you're using an earlier Python version, this command will not be available.

The Model Context Protocol (MCP) command allows you to start an MCP server that exposes Cycode's scanning capabilities to AI systems and applications. This enables AI models to interact with Cycode CLI tools via a standardized protocol.

TIP

For the best experience, install Cycode CLI globally on your system using pip install cycode or brew install cycode, then authenticate once with cycode auth. After global installation and authentication, you won't need to configure CYCODE_CLIENT_ID and CYCODE_CLIENT_SECRET environment variables in your MCP configuration files.

Starting the MCP Server

To start the MCP server, use the following command:

cycode mcp

By default, this starts the server using the stdio transport, which is suitable for local integrations and AI applications that can spawn subprocesses.

Available Options

Option	Description
`-t, --transport`	Transport type for the MCP server: `stdio`, `sse`, or `streamable-http` (default: `stdio`)
`-H, --host`	Host address to bind the server (used only for non stdio transport) (default: `127.0.0.1`)
`-p, --port`	Port number to bind the server (used only for non stdio transport) (default: `8000`)
`--help`	Show help message and available options

MCP Tools

The MCP server provides the following tools that AI systems can use:

Tool Name	Description
`cycode_secret_scan`	Scan files for hardcoded secrets
`cycode_sca_scan`	Scan files for Software Composition Analysis (SCA) - vulnerabilities and license issues
`cycode_iac_scan`	Scan files for Infrastructure as Code (IaC) misconfigurations
`cycode_sast_scan`	Scan files for Static Application Security Testing (SAST) - code quality and security flaws
`cycode_status`	Get Cycode CLI version, authentication status, and configuration information

Usage Examples

Configuration Examples

Using MCP with Cursor/VS Code/Claude Desktop/etc (mcp.json)

NOTE

For EU Cycode environments, make sure to set the appropriate CYCODE_API_URL and CYCODE_APP_URL values in the environment variables (e.g., https://api.eu.cycode.com and https://app.eu.cycode.com).

Follow this guide to configure the MCP server in your VS Code/GitHub Copilot. Keep in mind that in settings.json, there is an mcp object containing a nested servers sub-object, rather than a standalone mcpServers object.

For stdio transport with uvx installation:

{
  "mcpServers": {
    "cycode": {
      "command": "uvx",
      "args": ["cycode", "mcp"],
      "env": {
        "CYCODE_CLIENT_ID": "your-cycode-id",
        "CYCODE_CLIENT_SECRET": "your-cycode-secret-key",
        "CYCODE_API_URL": "https://api.cycode.com",
        "CYCODE_APP_URL": "https://app.cycode.com"
      }
    }
  }
}

NOTE

The MCP server requires proper Cycode CLI authentication to function. Make sure you have authenticated using cycode auth or configured your credentials before starting the MCP server.

Troubleshooting MCP

If you encounter issues with the MCP server, you can enable debug logging to get more detailed information about what's happening. There are two ways to enable debug logging:

Using the -v or --verbose flag:

cycode -v mcp

Using the CYCODE_CLI_VERBOSE environment variable:

CYCODE_CLI_VERBOSE=1 cycode mcp

The debug logs will show detailed information about:

Server startup and configuration
Connection attempts and status
Tool execution and results
Any errors or warnings that occur

This information can be helpful when:

Diagnosing connection issues
Understanding why certain tools aren't working
Identifying authentication problems
Debugging transport-specific issues

服务器配置

{
  "mcpServers": {
    "cycode": {
      "command": "uvx",
      "args": [
        "cycode",
        "mcp"
      ],
      "env": {
        "CYCODE_CLIENT_ID": "your-cycode-id",
        "CYCODE_CLIENT_SECRET": "your-cycode-secret-key",
        "CYCODE_API_URL": "https://api.cycode.com",
        "CYCODE_APP_URL": "https://app.cycode.com"
      }
    }
  }
}

CursorThe AI Code Editor

EdgeOne Pages MCPAn MCP service designed for deploying HTML content to EdgeOne Pages and obtaining an accessible public URL.

Tavily Mcp

Y GuiA web-based graphical interface for AI chat interactions with support for multiple AI models and MCP (Model Context Protocol) servers.

Jina AI MCP ToolsA Model Context Protocol (MCP) server that integrates with Jina AI Search Foundation APIs.

AiimagemultistyleA Model Context Protocol (MCP) server for image generation and manipulation using fal.ai's Stable Diffusion model.

ChatWiseThe second fastest AI chatbot™

WindsurfThe new purpose-built IDE to harness magic

RedisA Model Context Protocol server that provides access to Redis databases. This server enables LLMs to interact with Redis key-value stores through a set of standardized tools.

Visual Studio Code - Open Source ("Code - OSS")Visual Studio Code

Zhipu Web SearchZhipu Web Search MCP Server is a search engine specifically designed for large models. It integrates four search engines, allowing users to flexibly compare and switch between them. Building upon the web crawling and ranking capabilities of traditional search engines, it enhances intent recognition capabilities, returning results more suitable for large model processing (such as webpage titles, URLs, summaries, site names, site icons, etc.). This helps AI applications achieve "dynamic knowledge acquisition" and "precise scenario adaptation" capabilities.

Playwright McpPlaywright MCP server