Skip to main content

Authentication for Checkmarx One CLI and Plugins

In order to submit CLI commands you need to be authenticated for your Checkmarx One account. The required authentication parameters can be submitted as part of the CLI command or via Config or Environment variables, as described above. Authentication can be done either via OAuth Clients or an API Key.


The OAuth method has an advantage in the fact that you can specify the precise permissions needed for the integration. As opposed to an API Key, which automatically inherits all permissions of the user who generates the key.

The Checkmarx One CLI tool supports both methods. Some of the Checkmarx One plugins support only one or the other of the methods.

The following articles explain how to generate the required credentials in Checkmarx One.