{
 "categories": [
  "devsecops",
  "developer-tools"
 ],
 "deployment": "hybrid",
 "evidence": [
  {
   "date": "2026-10-12",
   "fact": "homepage",
   "note": "Cycode's llms.txt names the canonical product Cycode and the website https://cycode.com.",
   "source": "https://cycode.com/llms.txt",
   "tier": "declared"
  },
  {
   "date": "2026-10-12",
   "fact": "license",
   "note": "The pricing page says pricing is based on active developer count and AI usage. It does not publish a self-serve price.",
   "source": "https://cycode.com/pricing/",
   "tier": "declared"
  },
  {
   "date": "2026-10-12",
   "fact": "deployment",
   "note": "The CLI README defaults the API URL to https://api.cycode.com and shows an on-premises API URL as an example prompt value.",
   "source": "https://raw.githubusercontent.com/cycodehq/cycode-cli/main/README.md",
   "tier": "declared"
  },
  {
   "date": "2026-10-12",
   "fact": "modalities.api.exists",
   "note": "The CLI authenticates to a Cycode API. The example API URL is https://api.cycode.com.",
   "source": "https://raw.githubusercontent.com/cycodehq/cycode-cli/main/README.md",
   "tier": "declared"
  },
  {
   "date": "2026-10-12",
   "fact": "modalities.api.auth[0]",
   "note": "The README documents CYCODE_CLIENT_ID and CYCODE_CLIENT_SECRET for API authentication.",
   "source": "https://raw.githubusercontent.com/cycodehq/cycode-cli/main/README.md",
   "tier": "declared"
  },
  {
   "date": "2026-10-12",
   "fact": "modalities.api.auth[1]",
   "note": "The README says OIDC authentication uses CYCODE_ID_TOKEN.",
   "source": "https://raw.githubusercontent.com/cycodehq/cycode-cli/main/README.md",
   "tier": "declared"
  },
  {
   "date": "2026-10-12",
   "fact": "modalities.api.coverage",
   "note": "The README documents how the CLI reaches the API. A public unauthenticated endpoint catalog was not opened, so coverage stays unknown.",
   "source": "https://raw.githubusercontent.com/cycodehq/cycode-cli/main/README.md",
   "tier": "declared"
  },
  {
   "date": "2026-10-12",
   "fact": "modalities.mcp.first_party",
   "note": "The Cycode CLI README documents cycode mcp. The heading is still MCP Command [EXPERIMENT]. Default transport is stdio. sse and streamable-http are also documented.",
   "source": "https://raw.githubusercontent.com/cycodehq/cycode-cli/main/README.md",
   "tier": "declared"
  },
  {
   "date": "2026-10-12",
   "fact": "modalities.mcp.verdict",
   "note": "Cycode's launch post, last updated 8 October 2025, says the MCP server is in CLI v3.2.0 or later and tells readers to use the experimental MCP command.",
   "source": "https://cycode.com/blog/introducing-cycodes-mcp-server/",
   "tier": "declared"
  },
  {
   "date": "2026-10-12",
   "fact": "modalities.cli.exists",
   "note": "The README documents pip install cycode or brew install cycode, cycode auth, and scan commands. MCP tools wrap secret, SCA, IaC, and SAST scans.",
   "source": "https://raw.githubusercontent.com/cycodehq/cycode-cli/main/README.md",
   "tier": "declared"
  },
  {
   "date": "2026-10-12",
   "fact": "modalities.agent_docs.llms_txt",
   "note": "https://cycode.com/llms.txt opened as a structured Cycode reference and includes a Cycode MCP Server section.",
   "source": "https://cycode.com/llms.txt",
   "tier": "declared"
  },
  {
   "date": "2026-10-12",
   "fact": "freshness.watch[0].url",
   "note": "Opened the Cycode CLI README on 2026-10-12.",
   "source": "https://raw.githubusercontent.com/cycodehq/cycode-cli/main/README.md",
   "tier": "declared"
  },
  {
   "date": "2026-10-12",
   "fact": "freshness.watch[1].url",
   "note": "Opened the Cycode MCP launch post on 2026-10-12.",
   "source": "https://cycode.com/blog/introducing-cycodes-mcp-server/",
   "tier": "declared"
  },
  {
   "date": "2026-10-12",
   "fact": "freshness.watch[2].url",
   "note": "Opened https://cycode.com/llms.txt on 2026-10-12.",
   "source": "https://cycode.com/llms.txt",
   "tier": "declared"
  }
 ],
 "freshness": {
  "last_verified": "2026-10-12",
  "volatility": "high",
  "watch": [
   {
    "type": "docs",
    "url": "https://raw.githubusercontent.com/cycodehq/cycode-cli/main/README.md"
   },
   {
    "type": "docs",
    "url": "https://cycode.com/blog/introducing-cycodes-mcp-server/"
   },
   {
    "type": "docs",
    "url": "https://cycode.com/llms.txt"
   }
  ]
 },
 "homepage": "https://cycode.com/",
 "id": "cycode",
 "license": "commercial",
 "modalities": {
  "agent_docs": {
   "llms_txt": true
  },
  "api": {
   "auth": [
    "client-credentials",
    "oidc"
   ],
   "coverage": "unknown",
   "docs": null,
   "exists": true,
   "kinds": []
  },
  "cli": {
   "exists": true
  },
  "computer_use": {
   "issues": [],
   "viability": "unknown"
  },
  "data_access": {
   "export": [],
   "import": []
  },
  "extensibility": {
   "scripting": [],
   "webhooks": "unknown"
  },
  "integrations": {
   "make": "unknown",
   "n8n": "unknown",
   "power_automate": "unknown",
   "zapier": "unknown"
  },
  "mcp": {
   "first_party": true,
   "third_party": [],
   "verdict": "official"
  },
  "rpa": {
   "drivability": "unknown",
   "notes": "No repeatable UI probe was run. The documented agent path is the Cycode CLI, including its experimental MCP command, and computer-use viability was not measured.\n",
   "ui_stack": [],
   "vendor_support": []
  },
  "sdk": {
   "exists": "unknown",
   "languages": [],
   "official": "unknown"
  }
 },
 "name": "Cycode",
 "platforms": [
  "web",
  "linux"
 ],
 "related": {
  "alternatives": [
   "snyk",
   "semgrep",
   "sonarqube"
  ],
  "our_products": []
 },
 "schema_version": 1,
 "score_version": 1,
 "status": "active",
 "vendor": "Cycode",
 "verdict": {
  "best_path": "cli",
  "scores": {
   "api": 4,
   "cli": 6,
   "computer_use": null,
   "integrations": null,
   "mcp": 5,
   "overall": 6,
   "rpa": null
  },
  "summary": "Cycode is automatable today through the official Cycode CLI. This record is the Cycode application-security platform and the CLI in github.com/cycodehq/cycode-cli. Snyk, Semgrep, and SonarQube are separate products. Pricing is based on active developer count and AI usage, with no public price table on the pricing page. The CLI README documents https://api.cycode.com as the default API URL and an on-premises API URL as a supported prompt value. Authentication is a client ID and client secret, or an OIDC ID token in CYCODE_ID_TOKEN. cycode auth is the documented login. The public docs host did not open as an unauthenticated API reference in this pass, so API coverage stays unknown. The same README still headings the MCP command as MCP Command [EXPERIMENT]. cycode mcp starts a local server, stdio by default, with sse and streamable-http as other transports. Documented MCP tools include secret, SCA, IaC, and SAST scans plus cycode_status. The vendor blog, last updated 8 October 2025, says the server is in CLI v3.2.0 or later and calls the command experimental. https://cycode.com/llms.txt is a vendor product reference and describes the Cycode MCP server. Connector catalogs were not opened. Computer-use viability is unassessed. The CLI scores 6 and is the best path. The experimental MCP server scores 5. The API scores 4 because client credentials and the API host are documented, while a public endpoint reference was not opened.\n"
 }
}