Skip to content
Checkmarx One logo

Connectors / Security and compliance · HTTP Connector

Automate Checkmarx One with Tray.ai

Create a project and create a scan in Checkmarx One, and start a workflow when Checkmarx One sends “Scan completed”.

What can you do with Checkmarx One on Tray.ai?

Checkmarx One is an application security platform that scans source code, open source dependencies, and infrastructure as code for vulnerabilities and tracks results by project. Tray.ai connects to Checkmarx One through the HTTP Connector, so your workflows can call the Checkmarx One API alongside the rest of your stack.

  • When Checkmarx One sends “Scan completed”, post the results to your team chat.
  • Open a ticket in your issue tracker when Checkmarx One sends “Scan failed”.
  • Create a scan whenever a pull request is merged in your source control system.
  • Create a project in Checkmarx One when a new repository is set up in your source control system.
Connects through
HTTP Connector
Authentication
OAuth 2.0 or a bearer token

Set it up

Connect Checkmarx One to Tray.ai

Each step uses Checkmarx One's own API details, from its documentation.

Step 1

Sign in to Checkmarx One with OAuth 2.0

Set up an OAuth 2.0 authentication with the client ID and secret of an OAuth app you register with Checkmarx One. Sign in once and every step reads the token from there.

Step 2

Import a request from Checkmarx One's docs

Add an HTTP Client step and paste a cURL example from Checkmarx One's API docs. Tray.ai fills in the method, URL, headers, and query.

Step 3

Start with “List projects”

It's one of 8 documented actions, under Projects. The response comes back as data the next step can map into your other apps.

Step 4

Start workflows from Checkmarx One events

Give Checkmarx One the URL of a Tray.ai webhook trigger. “Scan completed” can then start a workflow, and so can 3 other events.

Give your AI agents Checkmarx One tools

Build an MCP server on Checkmarx One in Agent Gateway and choose which actions your agents can call. Every call runs with access control and an audit trail. How Agent Gateway works

  • List projects
  • List scans
  • Create a project
  • Get a project
  • Delete a project
  • Create a scan
  • Get a scan
  • Cancel a scan

What the Checkmarx One API covers

2 resources and 8 documented actions, each one a call the HTTP Connector can make from a Tray.ai workflow. Connecting it takes a few clicks: here's how.

Projects

  • List projects
  • Create a project
  • Get a project
  • Delete a project

Scans

  • List scans
  • Create a scan
  • Get a scan
  • Cancel a scan

Events Checkmarx One can send to a Tray.ai webhook trigger

  • Scan completed
  • Scan failed
  • Scan partially completed
  • Project created

Checked against Checkmarx One's own documentation on 2026-11-11

checkmarx.stoplight.io/docs/checkmarx-one-api-reference-g…

Frequently asked questions

What can a Tray.ai workflow do in Checkmarx One?

+

The Checkmarx One API documents 8 actions across 2 resources (Projects, Scans). For example: List projects; List scans. A workflow can make any documented call through the HTTP Connector.

How does Tray.ai authenticate with Checkmarx One?

+

The Checkmarx One API uses OAuth 2.0 and a bearer token. You save it once as a Tray.ai authentication, and the HTTP Connector adds it to every request.

Which Checkmarx One events can start a Tray.ai workflow?

+

Checkmarx One sends 4 events to a webhook URL, for example: Scan completed; Scan failed; Scan partially completed; Project created. A Tray.ai webhook trigger receives them and starts a workflow.

See Checkmarx One working against your stack.

We'll walk through a tailored demo with your systems plugged in.

Great — a couple more details

This helps us connect you with the right person. Optional, and you can skip it.