MCP.so
ログイン

Snyk

@snyk

Snyk について

Enhance security posture by embedding Snyk vulnerability scanning directly into agentic workflows.

基本情報

カテゴリ

開発者ツール

トランスポート

stdio

公開者

snyk

投稿者

Hammerhead Bot

設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "Snyk Security Scanner": {
      "command": "snyk",
      "args": [
        "mcp",
        "-t",
        "stdio",
        "--experimental"
      ]
    }
  }
}

ツール

ツールは検出されませんでした

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is Snyk?

The Snyk MCP server is an experimental CLI command that bridges Snyk security scanning with MCP-enabled tools and AI workflows. It allows developers to trigger scans for open‑source dependencies, code, and infrastructure‑as‑code configurations, and retrieve findings directly in their MCP context. The server is part of the Snyk CLI (v1.1296.2 or later) and requires no additional dependencies.

How to use Snyk?

Install the Snyk CLI (v1.1296.2 or later). Start the MCP server with snyk mcp -t stdio --experimental or snyk mcp -t sse --experimental. Then configure the server in your MCP client’s mcpconfig.json file – using the command/args fields for stdio transport, or the url field for SSE. Once connected, you can invoke tools such as snyk_sca_test (open source scan) or snyk_code_test (code scan) from your AI assistant or IDE.

Key features of Snyk

  • Trigger security scans for open‑source, code, and configuration issues.
  • Retrieve Snyk findings directly in your MCP‑enabled environment.
  • Supports stdio and SSE transport protocols.
  • Provides authentication (snyk_auth) and version (snyk_version) tools.
  • Early Access feature – usage and parameters may evolve.
  • No extra dependencies beyond the Snyk CLI.

Use cases of Snyk

  • Scan a project’s dependencies for vulnerabilities during AI‑assisted development.
  • Run code security analysis from within an IDE like VS Code or Windsurf.
  • Automate security checks within

コメント

「開発者ツール」の他のコンテンツ