Aikido MCP server
npm install @aikidosec/mcpA lightweight Model Context Protocol (MCP) server that exposes Aikido’s Code and Secrets Scan as a tool for AI coding agents and IDEs. It lets your agent scan code and returns machine-readable findings you can triage or fix.
The MCP server requires an Aikido API key to authenticate with the Aikido API. You can provide it in two ways:
1. Via MCP Configuration (Recommended): Set the AIKIDO_API_KEY environment variable in your MCP configuration file
2. Via System Environment Variable: Set AIKIDO_API_KEY as a system environment variable
Go to Settings > Cursor Settings > MCP & Integrations > New MCP server
Add the following configuration to your Cursor ~/.cursor/mcp.json file. See Cursor MCP docs for more info.
``json`
{
"mcpServers": {
"aikido": {
"command": "npx",
"args": ["-y", "@aikidosec/mcp"],
"env": {
"AIKIDO_API_KEY": "your-api-key-here"
}
}
}
}
Note: Replace "your-api-key-here" with your actual Aikido API key.
Add the following config to ~/.codeium/windsurf/mcp_config.json. See Windsurf MCP docs for more info.
`json`
{
"mcpServers": {
"aikido": {
"command": "npx",
"args": ["-y", "@aikidosec/mcp"],
"env": {
"AIKIDO_API_KEY": "your-api-key-here"
}
}
}
}
Note: Replace "your-api-key-here" with your actual Aikido API key.
Open the VS Code Command Palette by using Ctrl+⇧Shift+P or ⌘Command+⇧Shift+P (macOS). Type MCP: Open User Configuration.
Add the following config to the MCP config file. See VS Code MCP docs for more info.
`json`
{
"servers": {
"aikido": {
"command": "npx",
"args": ["-y", "@aikidosec/mcp"],
"env": {
"AIKIDO_API_KEY": "your-api-key-here"
}
}
}
}
Note: Replace "your-api-key-here"` with your actual Aikido API key.