Skip to content

Teach the Corgea CLI skill about MCP installation #11

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
corgea-security wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Teach the Corgea CLI skill about MCP installation #11

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 11 additions & 1 deletion plugins/corgea/skills/corgea-scan/SKILL.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
---
name: corgea-scan
description: Drive the Corgea CLI to scan code for security vulnerabilities with the AI-powered BLAST scanner and apply the AI-generated fixes, gate pip and npm installs against vulnerable or malicious packages, inventory dependencies and produce SBOMs, and look up advisories. Use when asked to security-scan a project, scan a pull request diff or uncommitted changes before committing, install a pip/npm package safely, list or inspect Corgea findings, view or apply a fix diff, upload a Semgrep/SARIF/Checkmarx/Coverity/Fortify report, gate CI on severity, or produce SARIF for GitHub Code Scanning.
description: Drive the Corgea CLI to scan code for security vulnerabilities with the AI-powered BLAST scanner and apply the AI-generated fixes, gate pip and npm installs against vulnerable or malicious packages, inventory dependencies and produce SBOMs, look up advisories, and install Corgea MCP for an agent. Use when asked to security-scan a project, scan a pull request diff or uncommitted changes before committing, install a pip/npm package safely, connect an agent to Corgea MCP, list or inspect Corgea findings, view or apply a fix diff, upload a Semgrep/SARIF/Checkmarx/Coverity/Fortify report, gate CI on severity, or produce SARIF for GitHub Code Scanning.
---

# Corgea CLI
Expand Down Expand Up @@ -66,6 +66,16 @@ corgea login --url https://<instance>.corgea.app <TOKEN> # single-tenant token
`CORGEA_TOKEN` and `CORGEA_URL` are both read from the environment, so a bare
`corgea login` works in CI when they are set.

## Connect an agent to Corgea MCP

```bash
corgea mcp install --agent <agent>
```

This installs or refreshes the hosted Corgea MCP server in the agent's config,
using the URL and token from the Corgea login. Check `corgea mcp install --help`
for supported agents, scopes, and config locations.

## Core commands

```bash
Expand Down