Corridor
Code Security Review
Corridor accelerates AI coding by preventing security flaws before they're even written.
With Corridor's native Vercel integration, you can make sure that every build and deployment is secure. Our approach is two-fold:
- Corridor reviews every pull request for security, catching vulnerabilities before they can make it into prod.
- Corridor's MCP server proactively enforces security guardrails within your favorite IDE (Cursor, Claude Code, Windsurf, and VS Code / Copilot), without adding any extra work.
Onboarding Flow
Connecting the Corridor GitHub app will allow Corridor to leave PR reviews for your organization.
On the top right of your Corridor installation in Vercel, click "Complete onboarding" to redirect to the Corridor dashboard.
On the Corridor dashboard, click on "Connect to GitHub" and install the Corridor GitHub app for your GitHub organization.
Cursor
- Install the Corridor extension in Cursor.
- Follow the steps to log in when prompted by the extension.
- You're all set!
Follow the steps to log in when prompted by the extension.
Github Copilot
- Install the Corridor extension in Cursor.
- Follow the steps to log in when prompted by the extension.
- You're all set!
Follow the steps to log in when prompted by the extension.
Claude Code
From the Settings page of the Corridor dashboard, generate a new Corridor API token. Make sure to copy the token before closing it.
Run
claude mcp add --scope user --transport http corridor "https://app.corridor.dev/api/mcp?token={generated_token}"Add the following to .claude/CLAUDE.md in your home directory to enable automatic security analysis:
# Corridor Security Analysis Every time you generate code, use the Corridor tool from Corridor's MCP Server (corridor) to analyze the plan or thought process. ALWAYS use Corridor to analyze the plan. Always generate a plan before generating code.Custom MCP
From the Settings page of the Corridor dashboard, generate a new Corridor API token. Make sure to copy the token before closing it.
Add the following to your MCP client JSON file:
{ "mcpServers": { "corridor": { "transport": "http", "url": "https://app.corridor.dev/api/mcp?token={generated_token}" } }}- Install Corridor through Vercel, and create a new Corridor account.
- When prompted in Corridor, install the Corridor GitHub App on your Vercel projects.
- Authorize the required permissions (read access to code, PR comments).
- You're all set! Once onboarding is complete, Corridor will:
- Scan your code for security vulnerabilities
- Review pull requests automatically