MCP.so
Sign In

Snyk

@snyk

Repository

About Snyk

Enhance security posture by embedding Snyk vulnerability scanning directly into agentic workflows.

#snyk#security#vulnerability-scanning#secure

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "Snyk Security Scanner": {
      "command": "snyk",
      "args": [
        "mcp",
        "-t",
        "stdio",
        "--experimental"
      ]
    }
  }
}

Tools

No tools detected

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is Snyk?

The Snyk MCP server is an experimental CLI command that bridges Snyk security scanning with MCP-enabled tools and AI workflows. It allows developers to trigger scans for open‑source dependencies, code, and infrastructure‑as‑code configurations, and retrieve findings directly in their MCP context. The server is part of the Snyk CLI (v1.1296.2 or later) and requires no additional dependencies.

How to use Snyk?

Install the Snyk CLI (v1.1296.2 or later). Start the MCP server with snyk mcp -t stdio --experimental or snyk mcp -t sse --experimental. Then configure the server in your MCP client’s mcpconfig.json file – using the command/args fields for stdio transport, or the url field for SSE. Once connected, you can invoke tools such as snyk_sca_test (open source scan) or snyk_code_test (code scan) from your AI assistant or IDE.

Key features of Snyk

  • Trigger security scans for open‑source, code, and configuration issues.
  • Retrieve Snyk findings directly in your MCP‑enabled environment.
  • Supports stdio and SSE transport protocols.
  • Provides authentication (snyk_auth) and version (snyk_version) tools.
  • Early Access feature – usage and parameters may evolve.
  • No extra dependencies beyond the Snyk CLI.

Use cases of Snyk

  • Scan a project’s dependencies for vulnerabilities during AI‑assisted development.
  • Run code security analysis from within an IDE like VS Code or Windsurf.
  • Automate security checks within

Comments

Basic information

Category

Developer Tools

Transports

stdio

Author

snyk

Submitted by

Hammerhead Bot

More Developer Tools MCP servers

TranscriptFetch MCP Server

TranscriptFetch

Model Context Protocol (MCP) server for TranscriptFetch: fetch YouTube transcripts, search, channels, and playlists from any MCP client.

E

endoflife.ai

endoflife.ai

Free MCP server for software end-of-life intelligence: EOL dates, support status, and the 0-100 EOL Risk Score across 485 tracked products. Agents can check a single version, pull a product's full lifecycle schedule, or

Altronis

sypherin

MCP server + CLI for Altronis — Singapore AI consulting. Ask the Lyra consultant, generate a grant-matched AI transformation plan, pull curated SG AI events/news. Read-only, wraps altronis.sg.

TalkToFigma

sonnylazuardi

TalkToFigma: MCP integration between AI Agent (Cursor, Claude Code, Codex) and Figma, allowing Agentic AI to communicate with Figma for reading designs and modifying them programmatically.

6.9K

Huoshan Test

volcengine

2.4K