Aikido Security MCP server

What the model can do

Aikido Security: open issue groups by severity and type with counts, individual findings with package, CVE, repository, SLA and status, notes on issue groups, code repositories, containers, domains and PR checks; when you ask, can add a note, snooze, ignore, un-ignore, solve or re-rate an issue or issue group, start a repository, container or domain scan, and add or remove a repository label.

Reads

• aikido_list_issue_groupsAikido issue groups as the feed shows them, highest priority first: title, type, severity, status, time to fix, where found, related CVEs, how to fix.
• aikido_get_issue_groupOne Aikido issue group in full, with the notes people have left on it (newest as Aikido returns them).
• aikido_list_issuesIndividual Aikido findings (every status, not just the feed): type, rule, severity, status, package, CVE, repository, container, domain, SLA date…
• aikido_get_issueOne Aikido finding in full: rule, severity, status, package, CVE, reachability, location, SLA, snooze and ignore reasons, how to fix.
• aikido_list_repositoriesCode repositories Aikido scans: name, provider, branch, last scan, connectivity, sensitivity, labels and lockfile or scan problems.
• aikido_list_containersContainer repositories Aikido scans: name, registry, tag, distro, last scan, whether running and how it is exposed, connectivity, sensitivity.
• aikido_list_domainsDomains and APIs Aikido monitors (surface monitoring and DAST): domain, kind, whether authenticated scanning is set up, last scan…
• aikido_list_pr_checksAikido PR checks (CI gating scans): pull request, branch, repository, gate result, new and solved issues, when it started.

Acts, when you ask

These change something in Aikido Security. The model is told to use them only when you ask for exactly that, and each one is granted by name: per team on a shared connection, by the owner on a personal one.

• aikido_add_noteAdds a note to an Aikido issue group, visible to everyone in the workspace on that issue.
• aikido_snoozeSnoozes an Aikido issue, or every issue in an issue group, until a date: it leaves the open feed and stops counting toward open totals until then…
• aikido_unsnoozeEnds the snooze on an Aikido issue or issue group, so it is back in the open feed for everyone.
• aikido_ignoreIgnores an Aikido issue, or every issue in an issue group: it leaves the feed and open totals for the whole workspace until un-ignored…
• aikido_unignoreUn-ignores an Aikido issue or issue group, returning it to the open feed and totals for everyone.
• aikido_solve_issueMarks one Aikido issue as solved, closing it for everyone in the workspace (Aikido re-opens it if a later scan finds it again).
• aikido_adjust_severityChanges the severity of an Aikido issue or issue group to critical, high, medium or low, with a reason recorded on it…
• aikido_scan_repositoryStarts an Aikido scan of one code repository now (dependencies, plus SAST, IaC and secrets scans when asked)…
• aikido_scan_containerStarts an Aikido scan of one container repository now; new findings appear in the feed and may notify the team.
• aikido_scan_domainStarts an Aikido scan of one monitored domain now.
• aikido_add_repository_labelAdds a label to an Aikido code repository (labels group and filter repositories for the whole workspace).
• aikido_remove_repository_labelRemoves a label from an Aikido code repository.

Connect it

First connect Aikido Security on Dashboard → Connections, then add Memtro to your client once. The Aikido Security tools appear alongside the tools of everything else you have connected; nothing is configured per connector.

claude plugin marketplace add memtro-org/claude-memtro
claude plugin install memtro@memtro --config api_key=sk-memtro-...

{
  "mcpServers": {
    "memtro": {
      "url": "https://platform.memtro.com/api/mcp",
      "headers": {
        "Authorization": "Bearer sk-memtro-..."
      }
    }
  }
}

{
  "mcp": {
    "memtro": {
      "type": "remote",
      "url": "https://platform.memtro.com/api/mcp",
      "headers": {
        "Authorization": "Bearer sk-memtro-..."
      }
    }
  }
}

Who may use it

The key identifies the person, and the server offers that person the tools they may use everywhere else in Memtro. A shared Aikido Security connection is used by the teams an administrator granted it to, tool by tool, on the Permissions page; a personal connection is used by its owner alone, and its tools that act stay off until the owner allows them. See Teams and permissions and Connectors.

Ask it like this

• › Which critical issues are open in the payments repo?
• › How do we fix the top issue group in the checkout service?
• › Which code repositories have not been scanned recently?
• › Did the last PR check on the api-gateway repository pass its gate?
• › Snooze the lodash issue group until the end of the month.

Questions

Is this an official Aikido Security MCP server?

No. It is Memtro's MCP server with Memtro's Aikido Security connector behind it: the connector reads Aikido Security through its API with the credentials you connect on Dashboard → Connections, and Aikido Security publishes nothing here. The same endpoint carries every other system you connect and Memtro's memory tools.

What does it cost?

Nothing on top of Memtro. One price per organisation by its number of users, from $50 a month for up to 10 users after a 7-day free trial, with every connector, the MCP server, jobs and memory included. You bring your own model keys.

Can it change anything in Aikido Security?

Only when you ask, and only what it has been granted: add a note to an issue group; snooze an issue or issue group until a date; unsnooze an issue or issue group; ignore an issue or issue group; un-ignore an issue or issue group; mark an issue as solved; adjust the severity of an issue or issue group; start a scan of a code repository; start a scan of a container; start a scan of a domain; add a label to a code repository; remove a label from a code repository. Every other tool reads, searches or lists. An administrator grants each acting tool by name per team, and a personal connection acts only after its owner allows it.

Which clients work?

Any MCP client that speaks Streamable HTTP: Claude Code, Cursor, Claude Desktop, OpenCode, Codex, Zed, Windsurf, Cline and the Anthropic and OpenAI SDKs. There is no local process to run; the server is remote and authenticated with your key.

Other MCP servers · Engineering and operations

• GitHub MCP server
• AWS CloudWatch MCP server
• Sentry MCP server
• ServiceNow MCP server
• Okta MCP server
• Twilio MCP server