Cycode
Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning with Cycode.
Ads
Overview
The Cycode Command Line Interface (CLI) is an application you can install locally to scan your repositories for secrets, infrastructure as code misconfigurations, software composition analysis vulnerabilities, and static application security testing issues. This guide walks you through both installation and usage. 1. Prerequisites 2. Installation 1. Install Cycode CLI 1. Using the Auth Command 2. Using the Configure Command 3. Add to Environment Variables 1. On Unix/Linux 2. On Windows 2. Install Pre-Commit Hook 3. Cycode CLI Commands 4. Certificates and Proxies 5. MCP Command 1. Starting the MCP Server 2. Available Options 3. MCP Tools 4. Usage Examples 5. Advanced Configuration 6. Platform Command 1. Discovering Commands 2. Examples 3. Notes & Limitations 7. AI Guardrails 1. Data Collected by AI Guardrails 8. Scan Command 1. Running a Scan 1. Options 1. Severity Threshold 2. Monitor 3. Cycode Report 4. Package Vulnerabilities 5. License Compliance 6. Lock Restore 7. Stop on Error 2.
Installation
pip3 install cycode
Configuration
{
"mcpServers": {
"cycode": {
"command": "cycode",
"args": ["mcp"],
"env": {
"CYCODE_CLIENT_ID": "your-cycode-id",
"CYCODE_CLIENT_SECRET": "your-cycode-secret-key",
"CYCODE_API_URL": "https://api.cycode.com",
"CYCODE_APP_URL": "https://app.cycode.com"
}
}Capabilities
- Scan for secrets
Ask to run `cycode_secret_scan` on file paths or inline content to detect hardcoded credentials.
- Check dependencies
Use `cycode_sca_scan` to identify software composition vulnerabilities and license issues in your project.
- Audit infrastructure code
Invoke `cycode_iac_scan` to catch misconfigurations in Terraform, CloudFormation, or other IaC files.
- Detect code flaws
Run `cycode_sast_scan` to surface static application security testing issues in your source code.
- Verify CLI status
Call `cycode_status` to check version, authentication state, and configuration details.
Tags
- security
- devops
- code-quality
- development
- compliance
Related MCP servers
Context7 MCP
OfficialOfficial Context7 MCP server that brings up-to-date, version-specific library documentation and code examples into AI coding prompts.
Chrome DevTools MCP
OfficialOfficial Chrome DevTools MCP server for controlling and inspecting a live Chrome browser from coding agents such as Gemini, Claude, Cursor, and Copilot.
Mastra/mcp
OfficialClient implementation for Mastra, providing seamless integration with MCP-compatible AI models and tools.
GitHub MCP Server
OfficialConnect your AI assistant to GitHub repositories, issues, pull requests, and search.