MCP

The DryRun Security Insights MCP (Model Context Protocol) server gives AI assistants direct access to your organization's security data. Once connected, your AI coding tool can query findings, trends, pull request context, and Code Security Intelligence results in natural language, without leaving your development environment.

What You Can Do

With the Insights MCP connected, your AI assistant can:

• Generate summaries of recent security activity across your repositories
• Query findings for a specific pull request or file
• Ask natural language questions about your security posture (for example: "Have any new payment integrations been introduced in the last week?")
• Access Code Security Intelligence trends and agent stats
• Track security posture changes over time

For the full list of Code Security Intelligence capabilities, see Code Security Intelligence.

Supported Clients

The following AI coding tools support the DryRun Security Insights MCP:

Tool	Connection method
Cursor	HTTP MCP config
Codex	HTTP MCP config
Claude Code	CLI (claude mcp add)
Claude Desktop	Settings > Connectors
Windsurf	HTTP MCP config
VS Code	HTTP MCP config

For step-by-step setup instructions for each tool, go to Settings > Integrations in the DryRun Security dashboard, or see AI Coding Integration.

Authentication

The MCP server uses API key authentication. Pass your API key as a Bearer token in the Authorization header.

Before connecting, generate an API key from Settings > Access Keys in the DryRun Security dashboard. See API Access Keys for instructions.

The MCP server URL is:

https://insights-mcp.dryrun.security/api/insights/mcp

Configuration

Claude Code (CLI)

claude mcp add --transport http dryrun-security https://insights-mcp.dryrun.security/api/insights/mcp --header "Authorization: Bearer <your-api-key>"

HTTP JSON Config (Cursor, Windsurf, VS Code, Codex)

{
  "mcpServers": {
    "dryrun-security": {
      "type": "http",
      "url": "https://insights-mcp.dryrun.security/api/insights/mcp",
      "headers": {
        "Authorization": "Bearer <your-api-key>"
      }
    }
  }
}

Claude Desktop

1. Navigate to https://claude.ai
2. Select Settings
3. Select Connectors
4. Click Add custom connector
5. Enter the URL: https://insights-mcp.dryrun.security/api/insights/mcp
6. Select Add

Replace <your-api-key> with the key from Settings > Access Keys. See API Access Keys.

DryRun Remediation Skill

In addition to the MCP connection, you can install the DryRun Security remediation skill into your AI coding tool. The skill enables the tool to automatically detect findings and generate fixes. See DryRun Skill for installation instructions.

Verifying the Connection

Once configured, confirm the DryRun Security Insights tool is available in your AI assistant's toolset. Try asking: "What is my insights summary for the past week?"

If you encounter any issues, reach out at hi@dryrun.security.