Skip to main content

Installation and Initial Setup

Initial Setup and Configuration

Prerequisites

  • You have a an API Key for authenticating with Developer Assist

Installing and Configuring the Plugin

  1. In the Cursor IDE, click on the Extensions icon.

  2. Search for the Checkmarx extension, then click Install for that extension.

    Image_918.png

    The Checkmarx extension is installed.

  3. Click the arrow next to the Extensions icon to open the drop-down menu. Then click the pin icon beside the Checkmarx extension to add it to the top navigation bar.

  4. Click on the Checkmarx extension icon.

    The Checkmarx One Authentication sidebar opens:

    cursorsidebar.png

  5. In the Checkmarx One Authentication sidebar, select the API Key login button.

    The API Key Log in window opens.

    ApiKeyLogin.png

  6. Enter your Checkmarx One API Key and click Log in.

    The Checkmarx One Authentication sidebar will now show that you are logged in.

    Image_898.png

  7. A Checkmarx Developer Assist welcome page is displayed immediately after a successful login. Scroll down and click on Mark Done.

  8. To verify that your MCP server is running:

    1. In Cursor Settings under Tools & MCP > Installed MCP Servers, confirm that the Checkmarx Developer Assist toggle is enabled.

      Image_794.png

  9. You can optionally adjust the Checkmarx Developer Assist Settings as follows:

    1. Add Additional Params to set up custom configuraitions, such as proxy servers or to run in debug mode.

    2. Enable/disable specific realtime scanners. By default, all scanners are enabled.

    3. For IaC realtime scanner you can change the container platform used, Docker (default) or Podman.

    4. MCP Authentication – Select the authentication method used by the Checkmarx MCP server. For SAST On-Prem accounts, only Token Based authentication is supported.

      Notice

      After changing the authentication method, click Install MCP to update the mcp.json configuration.

      • OAuth (default) when the MCP server starts, a browser-based login session is initiated to authenticate with your Checkmarx One account.

        Warning

        OAuth is not supported for SAST On-Prem Accounts

      • Token Based uses the API key associated with your current Checkmarx One login and avoids browser authentication when starting the MCP server.

        Warning

        When this method is used, the API key is stored in the mcp.json file.

In this section: