MCP.so
Sign In

Snyk

@snyk

Repository

About Snyk

Enhance security posture by embedding Snyk vulnerability scanning directly into agentic workflows.

#snyk#security#vulnerability-scanning#secure

Basic information

Category

Developer Tools

Transports

stdio

Publisher

snyk

Submitted by

Hammerhead Bot

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "Snyk Security Scanner": {
      "command": "snyk",
      "args": [
        "mcp",
        "-t",
        "stdio",
        "--experimental"
      ]
    }
  }
}

Tools

No tools detected

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is Snyk?

The Snyk MCP server is an experimental CLI command that bridges Snyk security scanning with MCP-enabled tools and AI workflows. It allows developers to trigger scans for open‑source dependencies, code, and infrastructure‑as‑code configurations, and retrieve findings directly in their MCP context. The server is part of the Snyk CLI (v1.1296.2 or later) and requires no additional dependencies.

How to use Snyk?

Install the Snyk CLI (v1.1296.2 or later). Start the MCP server with snyk mcp -t stdio --experimental or snyk mcp -t sse --experimental. Then configure the server in your MCP client’s mcpconfig.json file – using the command/args fields for stdio transport, or the url field for SSE. Once connected, you can invoke tools such as snyk_sca_test (open source scan) or snyk_code_test (code scan) from your AI assistant or IDE.

Key features of Snyk

  • Trigger security scans for open‑source, code, and configuration issues.
  • Retrieve Snyk findings directly in your MCP‑enabled environment.
  • Supports stdio and SSE transport protocols.
  • Provides authentication (snyk_auth) and version (snyk_version) tools.
  • Early Access feature – usage and parameters may evolve.
  • No extra dependencies beyond the Snyk CLI.

Use cases of Snyk

  • Scan a project’s dependencies for vulnerabilities during AI‑assisted development.
  • Run code security analysis from within an IDE like VS Code or Windsurf.
  • Automate security checks within

Comments

More Developer Tools MCP servers

Unity MCP (Server + Plugin)

IvanMurzak

AI Skills, MCP Tools, and CLI for Unity Engine. Full AI develop and test loop. Use cli for quick setup. Efficient token usage, advanced tools. Any C# method may be turned into a tool by a single line. Works with Claude Code, Gemini, Copilot, Cursor and any other absolutely for fr

3.5K

Smithery CLI

smithery-ai

Install, manage and develop MCP servers and skills for agents

788

Golf

golf-mcp

Production-Ready MCP Server Framework • Build, deploy & scale secure AI agent infrastructure • Includes Auth, Observability, Debugger, Telemetry & Runtime • Run real-world MCPs powering AI Agents

834

Burp Suite MCP Server Extension

PortSwigger

MCP Server for Burp

961

Test

x1xhlol

FULL Augment Code, Claude Code, Cluely, CodeBuddy, Comet, Cursor, Devin AI, Junie, Kiro, Leap.new, Lovable, Manus, NotionAI, Orchids.app, Perplexity, Poke, Qoder, Replit, Same.dev, Trae, Traycer AI, VSCode Agent, Warp.dev, Windsurf, Xcode, Z.ai Code, Dia & v0. (And other Open Sou

141.7K