Corridor MCP

Corridor’s MCP server provides tools that enable AI coding assistants to directly interact with your security data. When you use Claude Code, Cursor, or other MCP-compatible tools, the AI assistant can access and manage your Corridor findings and guardrails.

Available tools

Tool	Description
`analyzePlan`	Analyze a planned code implementation and get relevant security context from your project’s guardrails
`getFindings`	Retrieve security findings with filters for state (open/closed/potential), severity, and limit
`getFinding`	Get detailed info about a specific finding including description, affected code, and remediation guidance
`updateFindingState`	Mark findings as closed (false positive, risk accepted, fixed) or reopen them
`getGuardrails`	Get security guardrails and context documents for a project
`createGuardrail`	Create new security guardrails programmatically
`getGuardrailVersions`	List a guardrail’s version history, newest first. Private beta.
`restoreGuardrailVersion`	Restore an earlier version as the new current version. Private beta.
`updateGuardrail`	Edit a custom guardrail’s name, overview, or text. Private beta.
`archiveGuardrail`	Archive a custom guardrail so it stops running. Private beta.
`listProjects`	List all Corridor projects you have access to

Owner and Admin can use every tool listed above. Writes need custom guardrails on your plan. Standard Users can use analyzePlan only. They can also use getFinding and updateFindingState on development findings from their own Corridor scans. They cannot list, create, edit, restore, or archive guardrails.

Guardrail versioning through MCP

Guardrail versioning is in private beta. Corridor must enable it for your team.

Versioning is available in the Corridor app and through these MCP tools. Use them when a Scheduled Agent or an assistant changes a guardrail and you want to see what changed or go back:

getGuardrailVersions — list version history, newest first. Read-only.
restoreGuardrailVersion — copy an earlier version onto the live guardrail. This writes a new current version. History stays.

restoreGuardrailVersion needs custom guardrails on your plan.

Update and archive through MCP

Updating and archiving guardrails through MCP is a separate private beta feature. Corridor must enable it for your team.

These tools let an AI assistant edit or archive a custom guardrail. That is the assistant path for the same kinds of edits a Scheduled Agent can make when it tightens coverage:

updateGuardrail — edit name, overview, or text. Available when versioning is on.
archiveGuardrail — archive a guardrail so it stops running. Needs archive enabled as well.

There is no MCP tool to un-archive a guardrail. Un-archive it on the dashboard. See Guardrails for the dashboard archive behavior.

analyzePlan

The analyzePlan tool is the core tool that AI coding assistants call before generating code. It takes a description of what you plan to implement and returns relevant security context from your project’s guardrails and context documents. This helps prevent vulnerabilities by giving the AI assistant project-specific security guidance at the point of code generation. Parameters:

Parameter	Type	Required	Description
`plan`	string	Yes	Description of what you plan to implement or the user request you are working on, plus relevant code snippets from the files you are working with
`cwd`	string	No	Absolute path to the current working directory of the workspace
`branch`	string	No	Current git branch name
`commit_hash`	string	No	Current git commit hash
`has_unstaged_changes`	boolean	No	Whether there are uncommitted changes in the working directory

Example:

You: "Add a login form that accepts email and password"

Claude: [Uses analyzePlan with plan='Add a login form that accepts email and password']
       Corridor returns security guidance like:
       • Ensure all user input is validated and sanitized server-side before processing
       • Use parameterized queries for any database lookups to prevent SQL injection
       • Implement rate limiting on the login endpoint to prevent brute-force attacks

The AI assistant uses this security context to write safer code from the start, following your team’s specific guardrails.

Example conversation

You: "What are the open critical security issues in this project?"

Claude: [Uses getFindings with state='open', severity='critical']
       "I found 3 critical security findings:
        1. SQL Injection in auth.ts:42
        2. XSS vulnerability in render.tsx:87
        ..."

Your AI assistant can also:

“Add a new API endpoint” → calls analyzePlan for security context before writing code
“Show me details about finding X” → calls getFinding
“Mark this finding as a false positive” → calls updateFindingState
“What guardrails should I follow?” → calls getGuardrails
“Create a guardrail for SQL injection prevention” → calls createGuardrail
“Show me this guardrail’s versions” → calls getGuardrailVersions
“Restore this guardrail to an earlier version” → calls restoreGuardrailVersion
“Update this guardrail” → calls updateGuardrail
“Archive this guardrail” → calls archiveGuardrail

Requirements

Corridor extension installed and authenticated
MCP enabled for your team (team setting)
IDE Extension Support entitlement on your plan
User must be a member of a team that owns the project

Security notes

Tools validate team membership before granting access
Uniform 404 responses prevent information leakage
Admin operations reject API tokens (require user auth)

Next steps

Findings

Track and remediate security issues

Guardrails

Configure security guardrails

Getting Started

Onboarding

IDE Setup

Long-Running Agents

Features

Agent Governance

Integrations

Administration

Available tools

Guardrail versioning through MCP

Update and archive through MCP

analyzePlan

Example conversation

Requirements

Security notes

Next steps

Findings

Guardrails

​Available tools

​Guardrail versioning through MCP

​Update and archive through MCP

​analyzePlan

​Example conversation

​Requirements

​Security notes

​Next steps

Findings

Guardrails

Available tools

Guardrail versioning through MCP

Update and archive through MCP

analyzePlan

Example conversation

Requirements

Security notes

Next steps