Skip to main content

Authentication for Checkmarx One CLI and Plugins

In order to submit CLI commands you need to be authenticated for your Checkmarx One account. The required authentication parameters can be submitted as part of the CLI command or via Config or Environment variables, see Using Checkmarx One CLI Variables. Authentication can be done either via OAuth2 Clients or an API Key.


The OAuth2 method has an advantage in the fact that you can specify the precise permissions needed for the integration. As opposed to an API Key, which automatically inherits all permissions of the user who generates the key.

The Checkmarx One CLI tool supports both methods. Some of the Checkmarx One plugins support only one or the other of the methods.

The following articles explain how to generate the required credentials in Checkmarx One.