@aikidosec/mcp

Aikido MCP Server

A lightweight Model Context Protocol (MCP) server that exposes Aikido’s Code and Secrets Scan as a tool for AI coding agents and IDEs. It lets your agent scan code and returns machine-readable findings you can triage or fix.

Prerequisites

• Node.js 18 or newer
• An Aikido API key (get yours from Aikido Security)

Configuration

API Key Setup

The MCP server requires an Aikido API key to authenticate with the Aikido API. You can provide it in two ways:

• Via MCP Configuration (Recommended): Set the AIKIDO_API_KEY environment variable in your MCP configuration file
• Via System Environment Variable: Set AIKIDO_API_KEY as a system environment variable

Add to your IDE or agent

Below are example configurations to add to your the Aikido MCP to your IDE.

Cursor

Go to Settings > Cursor Settings > MCP & Integrations > New MCP server

Add the following configuration to your Cursor ~/.cursor/mcp.json file. See Cursor MCP docs for more info.

{
  "mcpServers": {
    "aikido": {
      "command": "npx",
      "args": ["-y", "@aikidosec/mcp"],
      "env": {
        "AIKIDO_API_KEY": "your-api-key-here"
      }
    }
  }
}

Note: Replace "your-api-key-here" with your actual Aikido API key.

Windsurf

Add the following config to ~/.codeium/windsurf/mcp_config.json. See Windsurf MCP docs for more info.

{
  "mcpServers": {
    "aikido": {
      "command": "npx",
      "args": ["-y", "@aikidosec/mcp"],
      "env": {
        "AIKIDO_API_KEY": "your-api-key-here"
      }
    }
  }
}

Note: Replace "your-api-key-here" with your actual Aikido API key.

VS Code

Open the VS Code Command Palette by using Ctrl+⇧Shift+P or ⌘Command+⇧Shift+P (macOS). Type MCP: Open User Configuration. Add the following config to the MCP config file. See VS Code MCP docs for more info.

{
  "servers": {
    "aikido": {
      "command": "npx",
      "args": ["-y", "@aikidosec/mcp"],
      "env": {
        "AIKIDO_API_KEY": "your-api-key-here"
      }
    }
  }
}

Note: Replace "your-api-key-here" with your actual Aikido API key.