Can AI agents automate Cycode?

Cycode is automatable today through the official Cycode CLI. This record is the Cycode application-security platform and the CLI in github.com/cycodehq/cycode-cli. Snyk, Semgrep, and SonarQube are separate products. Pricing is based on active developer count and AI usage, with no public price table on the pricing page. The CLI README documents https://api.cycode.com as the default API URL and an on-premises API URL as a supported prompt value. Authentication is a client ID and client secret, or an OIDC ID token in CYCODE_ID_TOKEN. cycode auth is the documented login. The public docs host did not open as an unauthenticated API reference in this pass, so API coverage stays unknown. The same README still headings the MCP command as MCP Command [EXPERIMENT]. cycode mcp starts a local server, stdio by default, with sse and streamable-http as other transports. Documented MCP tools include secret, SCA, IaC, and SAST scans plus cycode_status. The vendor blog, last updated 8 October 2025, says the server is in CLI v3.2.0 or later and calls the command experimental. https://cycode.com/llms.txt is a vendor product reference and describes the Cycode MCP server. Connector catalogs were not opened. Computer-use viability is unassessed. The CLI scores 6 and is the best path. The experimental MCP server scores 5. The API scores 4 because client credentials and the API host are documented, while a public endpoint reference was not opened.

Best path today: cli · Overall automatability: 6/10