AI Coding Assistants (MCP)

The Aikido MCP Plugin connects Aikido’s security engine to AI coding tools. It automatically scans AI generated code for vulnerabilities and hardcoded secrets as soon as it is created.

AI assistants can review their own output, but that review is not perfect. Aikido adds a reliable and consistent security layer that checks every generated snippet with proven scanning rules.

Why use Aikido MCP

• Deterministic, independent security checks on every AI generated snippet before it is committed
• Immediate detection and remediation of vulnerabilities and hardcoded secrets in AI assisted workflows
• Real time feedback, making AI driven development safer by default

Demo

Demo of the Aikido MCP server working with an agent rule to scan and fix vulnerabilities in AI generated code:

Installation

AI Platforms

• Anthropic Claude Code MCP
• Cursor MCP
• OpenAI Codex CLI MCP
• Gemini CLI MCP
• Jetbrains AI
• Github Copilot
• Mistral Vibe MCP
• OpenCode MCP
• Devin MCP

Via Aikido IDE plugins

When the Aikido IDE plugin is installed you can use the Aikido Expansion Packs to install the Aikido MCP server with one click. Learn more in the Expansion Packs docs.

• Cursor IDE
• Google Antigravity IDE
• jetbrains-ide-plugins.md
• Kiro IDE
• VS Code IDE
• Windsurf IDE

Manual installation for other platforms

For any other AI platform or custom MCP setup, refer to the npm package page for detailed manual installation instructions.

Using the MCP server

For the tools the server exposes, see Available tools. For prompts that put them to work, see Example prompts.

Pull request comments

Use the MCP of your source control system to fetch pull request comments and to react to them. Aikido recommends this for every provider. Have the agent reply and interact on those comments the same way a person would.

See Fetch Pull Request Comments for more information.