Skip to content

CHANGELOG.md

Latest commit

 

History

History
70 lines (54 loc) · 3.19 KB

CHANGELOG.md

File metadata and controls

70 lines (54 loc) · 3.19 KB
Raw

Changelog

All notable changes to the Checkmarx Security MCP Server will be documented below.

Added in v1.0 (24-o6-2026)

Core MCP Server

  • Initial release of the Checkmarx Security MCP Server
  • Multi-protocol transport support: stdio, sse, and http (streamable HTTP)
  • Modular architecture enabling independent team contributions per module

Authentication

  • API Key authentication via Authorization header
  • OAuth2 authentication with Dynamic Client Registration (DCR) support

Scanning Tools (7 tools)

  • planScan — Recommend scan engines before triggering
  • triggerScan — Start scans in CLI (local code) or API (repository URL) mode
  • getScanDetails — Retrieve scan status, progress, and severity summary
  • getLatestScans — Fetch recent scans for a project
  • listScans — List scans with status, date range, and branch filters
  • listFindings — List vulnerabilities with severity filtering
  • getFindingDetails — Get detailed information for a specific finding

Project Management Tools (4 tools)

  • resolveProject — Resolve a project by name (exact match, candidates, or not found)
  • createProject — Create a new Checkmarx One project
  • listProjects — Browse or search all projects
  • getProjectConfig — Retrieve full project configuration

Application Management Tools (4 tools)

  • listApplications — Browse or search applications
  • createApplication — Create a new application
  • getApplicationDetails — Get application details by ID
  • associateProject — Link projects to an application

Analytics & Risk Tools (7 tools)

  • getTenantVulnerabilitiesSummary — Returns org-wide severity counts by engine over a time window (trends).

Remediation Tools (3 tools)

  • codeRemediation — Provides fixes for code-level issues: SAST, secrets, and IaC misconfigurations.
  • packageRemediation — Analyzes and remediates a specific vulnerable or malicious package/dependency.
  • imageRemediation — Provides remediation for container image CVEs and safer base-image alternatives

MCP Resources (5 resources)

  • cxone://engines — Supported scan engine definitions (SAST, SCA, KICS, Secret Detection)
  • cxone://severity-levels — Vulnerability severity level definitions
  • cxone://finding-states — Finding lifecycle states
  • cxone://scan-statuses — Scan execution status definitions
  • cxone://capabilities — Server capabilities and tool routing rules

MCP Prompts (1 prompt)

  • security-scan — Guided end-to-end scan workflow with engine selection, project resolution, and results

Scan Engines Support

  • SAST — Static Application Security Testing (30+ languages)
  • SCA — Software Composition Analysis (open-source dependencies)
  • KICS — Infrastructure as Code security (Terraform, CloudFormation, Kubernetes, Dockerfile)
  • Secret Detection — Hardcoded credentials, API keys, and tokens

Integrations

  • Checkmarx One platform (SAST, SCA, KICS, Container Security)
  • OpenTelemetry for distributed tracing and structured logging

IDE & Client Support

  • All MCP client which supports API key and OAuth2 with DCR authentication
  • Example: Windsurf, GitHub Copilot, Claude, Cursor etc.