Aikido MCP Server

A lightweight Model Context Protocol (MCP) server that exposes Aikido’s Code and Secrets Scan as a tool for AI coding agents and IDEs. It lets your agent scan code and returns machine-readable findings you can triage or fix.

Prerequisites

- Node.js 18 or newer
- An Aikido API key (get yours from Aikido Security)

Configuration

$3

The MCP server requires an Aikido API key to authenticate with the Aikido API. You can provide it in two ways:

1. Via MCP Configuration (Recommended): Set the AIKIDO_API_KEY environment variable in your MCP configuration file
2. Via System Environment Variable: Set AIKIDO_API_KEY as a system environment variable

Add to your IDE or agent

Below are example configurations to add to your the Aikido MCP to your IDE.

$3

Go to Settings > Cursor Settings > MCP & Integrations > New MCP server

Add the following configuration to your Cursor ~/.cursor/mcp.json file. See Cursor MCP docs for more info.

``json
{
"mcpServers": {
"aikido": {
"command": "npx",
"args": ["-y", "@aikidosec/mcp"],
"env": {
"AIKIDO_API_KEY": "your-api-key-here"
}
}
}
}
`

Note: Replace "your-api-key-here" with your actual Aikido API key.

$3

Add the following config to ~/.codeium/windsurf/mcp_config.json. See Windsurf MCP docs for more info.

`json
{
"mcpServers": {
"aikido": {
"command": "npx",
"args": ["-y", "@aikidosec/mcp"],
"env": {
"AIKIDO_API_KEY": "your-api-key-here"
}
}
}
}
`

Note: Replace "your-api-key-here" with your actual Aikido API key.

$3

Open the VS Code Command Palette by using Ctrl+⇧Shift+P or ⌘Command+⇧Shift+P (macOS). Type MCP: Open User Configuration.
Add the following config to the MCP config file. See VS Code MCP docs for more info.

`json
{
"servers": {
"aikido": {
"command": "npx",
"args": ["-y", "@aikidosec/mcp"],
"env": {
"AIKIDO_API_KEY": "your-api-key-here"
}
}
}
}
`

Note: Replace "your-api-key-here"` with your actual Aikido API key.