MCP.so
ログイン

Snyk MCP Server

@snyk

基本情報

カテゴリ

開発者ツール

トランスポート

stdio

作者

snyk

投稿者

Hammerhead Bot

Snyk MCP Server について

Enhance security posture by embedding Snyk vulnerability scanning directly into agentic workflows.

#snyk#security#vulnerability-scanning#secure

Snyk MCP Server の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "Snyk Security Scanner": {
      "command": "snyk",
      "args": [
        "mcp",
        "-t",
        "stdio",
        "--experimental"
      ]
    }
  }
}

Snyk MCP Server のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is Snyk?

The Snyk MCP server is an experimental CLI command that bridges Snyk security scanning with MCP-enabled tools and AI workflows. It allows developers to trigger scans for open‑source dependencies, code, and infrastructure‑as‑code configurations, and retrieve findings directly in their MCP context. The server is part of the Snyk CLI (v1.1296.2 or later) and requires no additional dependencies.

How to use Snyk?

Install the Snyk CLI (v1.1296.2 or later). Start the MCP server with snyk mcp -t stdio --experimental or snyk mcp -t sse --experimental. Then configure the server in your MCP client’s mcpconfig.json file – using the command/args fields for stdio transport, or the url field for SSE. Once connected, you can invoke tools such as snyk_sca_test (open source scan) or snyk_code_test (code scan) from your AI assistant or IDE.

Key features of Snyk

  • Trigger security scans for open‑source, code, and configuration issues.
  • Retrieve Snyk findings directly in your MCP‑enabled environment.
  • Supports stdio and SSE transport protocols.
  • Provides authentication (snyk_auth) and version (snyk_version) tools.
  • Early Access feature – usage and parameters may evolve.
  • No extra dependencies beyond the Snyk CLI.

Use cases of Snyk

  • Scan a project’s dependencies for vulnerabilities during AI‑assisted development.
  • Run code security analysis from within an IDE like VS Code or Windsurf.
  • Automate security checks within

コメント

「開発者ツール」の他のコンテンツ