aikido — Claude Code plugin: code and secret scanning
Wires Aikido Security into Claude through its MCP server, so the agent can scan the code it writes or edits for vulnerabilities and leaked secrets.
/plugin install aikido@claude-plugins-official
/plugin marketplace add anthropics/claude-plugins-officialWhat aikido does
The aikido plugin registers the Aikido Security MCP server inside Claude. From there the agent scans code it just wrote or changed, looking for vulnerabilities, exposed secrets and IaC misconfigurations. You can also pull findings from your own Aikido feed without leaving the session.
The scanning itself happens on Aikido's side, so a working connection to the service comes first. Setup steps live in Aikido's own guide for Claude — walk through that before expecting results in the chat.
It ships through Anthropic's official marketplace, which means two commands and no hand-edited config files. If your project already runs a security pipeline, check whether it now overlaps with what the agent does.
What it helps with
- scan fresh code for vulnerabilities before committing
- catch secrets and API keys that slipped into a file
- pull open findings from your Aikido feed into the session
- spot misconfigurations in IaC files
- run a security scan without leaving Claude
Example prompts for the agent
- Scan this file for vulnerabilities with Aikido
- Check my recent changes for leaked secrets
- Show open findings from my Aikido feed
How to install aikido
Plugin marketplace
/plugin install aikido@claude-plugins-official/plugin marketplace add anthropics/claude-plugins-officialStep by step, with commands for each platform: Claude Code plugins: marketplaces, installing, and building your own
Questions about aikido
How do I install aikido in Claude Code?
Add the marketplace first: /plugin marketplace add anthropics/claude-plugins-official, then install the plugin: /plugin install aikido@claude-plugins-official. After that, set up the Aikido connection following its Claude guide.
What does the aikido plugin do?
It connects the Aikido Security MCP server to Claude. The agent can scan code it wrote or modified for vulnerabilities and secrets, and fetch findings from your Aikido feed.
What do I need before using aikido?
A configured Aikido Security connection, since scanning runs on the service side. The setup steps are in Aikido's installation guide for Claude.
