Black Duck Signal and Claude Code

Black Duck Signal

How to register the Black Duck MCP server with Claude and begin scanning code.

Quickstart

Signal Developer can work with Claude Code to secure your code, including code generated by agentic workflows. This quickstart describes how to register the Black Duck MCP server with Claude Code. If this doesn’t work for you or you prefer a different method, see the official Claude documentation for installing MCP servers.

Note: Available with: Signal Developer and Signal Enterprise.
Prerequisites:

Register the Black Duck MCP Server for Claude Code

  1. ‌Install with CLI commands

    $ claude mcp add black-duck --transport stdio --scope user --env BLACKDUCK_MCP_GATEWAY_KEY=YOUR_LLM_API_KEY -- npx @black-duck/mcp-server@latest

    About this codeblock:

    • This two-part instruction stores the MCP configuration in Claude’s system, then uses NPX to install and run the Black Duck MCP server and establish communication between the two.

    • Be sure to substitute your API key environment variable after key=.

    • Including --scope user sets the MCP at the user level and not system-wide. This prevents other users from accessing the MCP server with your credentials.

Verify your setup

  1. Start Claude Code

    $ claude

  2. Ask Claude to scan some of your files using Black Duck.

    A screenshot of Claude Code with user input that asks Claude: "Scan showtime.py for security vulnerabilities using Black Duck."