{
  "markdown": "# Checkmarx Agentic AI\n[![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)\n\n> Checkmarx application security, built for AI coding agents. This repository holds two ways to bring\n> [Checkmarx One](https://checkmarx.com/product/application-security-platform/) into an AI-assisted\n> workflow: an **MCP server** your assistant can call, and a **Claude Code plugin** that scans code as it\n> is written.\n\nUse them together or separately — they solve different halves of the problem.\n\n## Checkmarx Security MCP\n\n\nA hosted [MCP](https://modelcontextprotocol.io) server that connects any MCP-capable AI client — Claude,\nCursor, Copilot, Windsurf, Kiro — to Checkmarx One. It exposes scanning, findings, project management,\nand AI-generated remediation as tools your assistant can call in conversation.\n\n**Reach for this when** you want your assistant to scan projects, investigate findings, or fix them on\nrequest — in whichever AI client you already use. Configure it once (see\n[examples/](examples) for per-client config) and ask.\n\n## How it works (at a glance)\n\nFor more details **→ [README-MCP.md](README-MCP.md)**\n\n## cx-devassist plugin\n\n**→ [plugins/cx-devassist/README.md](plugins/cx-devassist/README.md)**\n\nA fail-closed security gate for [Claude Code](https://claude.com/claude-code). Before Claude writes a\nfile, runs a command, or calls a tool, the Checkmarx `cx` CLI scans the proposed action. Real\nvulnerabilities are **blocked rather than silently allowed** — and so is the case where the scanner\nitself can't be trusted to run. Findings are remediated through the bundled Checkmarx MCP server.\n\n**Reach for this when** you want the check to be automatic and non-optional rather than something\nsomeone remembers to ask for.\n\nFor more details **→ [plugins/cx-devassist/README.md](plugins/cx-devassist/README.md)**\n\n## cx-cursor-plugin\n\nPlugin for [Cursor](https://cursor.com/) that integrates the Checkmarx MCP server directly through the [Cursor's marketplace](https://cursor.com/marketplace) mechanism.\n\nRefer **→ [README-MCP.md](README-MCP.md)** for more details on the MCP server.\n\nFor more details **→ [plugins/cx-cursor-plugin/README.md](plugins/cx-cursor-plugin/README.md)**\n\n## cursor-devassist\n\n**→ [plugins/cursor-devassist/README.md](plugins/cursor-devassist/README.md)**\n\nA fail-closed security gate for [Cursor](https://cursor.com/). Before Cursor writes or edits a\nscannable file or calls a Checkmarx MCP tool, the Checkmarx `cx` CLI scans the proposed action. Real\nvulnerabilities are **blocked rather than silently allowed** — and so is the case where the scanner\nitself can't be trusted to run. Findings are remediated through the bundled Checkmarx MCP server.\n\n**Reach for this when** you want the check to be automatic and non-optional rather than something\nsomeone remembers to ask for.\n\nFor more details **→ [plugins/cursor-devassist/README.md](plugins/cursor-devassist/README.md)**\n\n## copilot-devassist\n\n**→ [plugins/copilot-devassist/README.md](plugins/copilot-devassist/README.md)**\n\nA fail-closed security gate for [GitHub Copilot CLI](https://github.com/features/copilot/cli). Before\nCopilot creates or edits a file, the Checkmarx `cx` CLI scans the proposed content. Real vulnerabilities\nare **blocked rather than silently allowed** — and so is the case where the scanner itself can't be\ntrusted to run. Findings are remediated through the bundled Checkmarx MCP server.\n\n**Reach for this when** you want the check to be automatic and non-optional rather than something\nsomeone remembers to ask for.\n\nFor more details **→ [plugins/copilot-devassist/README.md](plugins/copilot-devassist/README.md)**\n\n\n## Documentation\n\n- [docs/usage.md](docs/usage.md) — the MCP tool catalog and example workflows\n- [docs/authentication.md](docs/authentication.md) — API key and OAuth2 setup\n- [docs/troubleshooting.md](docs/troubleshooting.md) — connection, auth, and scan issues\n\n## License\n\nApache 2.0 — see [LICENSE](LICENSE) for details. It governs everything in this repository, including the\n`cx-devassist` plugin.\n\n## Contributing\n\nSee [CONTRIBUTING.md](CONTRIBUTING.md) for guidelines, and [SECURITY.md](SECURITY.md) to report a\nvulnerability.\n\nWebsite: [Checkmarx](https://checkmarx.com/).\n\n\n© 2026 Checkmarx Ltd.\n",
  "bytes": 4304,
  "sha": "36e6178b73d224894997977b4b305ad7bd40649ff6d461e142e3804f82eb7c33",
  "repo_slug": "checkmarx/cx-agentic-ai",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_com_checkmarx_checkmarx_442a8709/readme"
}