MCP server
Snyk MCP server
Snyk code, dependency, container and IaC scans, built into the Snyk CLI.
Run in a terminal. Everything after -- is the command that starts the server. docs
claude mcp add --transport stdio snyk -- npx -y snyk@latest mcp -t stdio
Claude Desktop only: Settings > Developer > Edit Config opens claude_desktop_config.json. Add this, save and restart the app. docs
{
"mcpServers": {
"snyk": {
"command": "npx",
"args": [
"-y",
"snyk@latest",
"mcp",
"-t",
"stdio"
]
}
}
}Add to ~/.cursor/mcp.json (all projects) or .cursor/mcp.json (this project), or use the install button. docs
{
"mcpServers": {
"snyk": {
"command": "npx",
"args": [
"-y",
"snyk@latest",
"mcp",
"-t",
"stdio"
]
}
}
}Add to .vscode/mcp.json (note the "servers" key and the type), or use the install button. Command Palette > "MCP: Open User Configuration" for all workspaces. docs
{
"servers": {
"snyk": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"snyk@latest",
"mcp",
"-t",
"stdio"
]
}
}
}Run codex mcp add snyk -- npx -y snyk@latest mcp -t stdio, or add this to ~/.codex/config.toml. docs
[mcp_servers.snyk] command = "npx" args = ["-y", "snyk@latest", "mcp", "-t", "stdio"]
Run in a terminal (-s user adds it for all projects; the default is this project). docs
gemini mcp add -s user snyk npx -- -y snyk@latest mcp -t stdio
Run in a terminal; it writes ~/.copilot/mcp-config.json. docs
copilot mcp add snyk -- npx -y snyk@latest mcp -t stdio
Add to mcp_config.json: ~/.config/devin/mcp_config.json on macOS and Linux (older installs: ~/.codeium/windsurf/mcp_config.json), %APPDATA%\devin\ on Windows. docs
{
"mcpServers": {
"snyk": {
"command": "npx",
"args": [
"-y",
"snyk@latest",
"mcp",
"-t",
"stdio"
]
}
}
}Add to Zed's settings.json (or Settings > AI > MCP Servers > Add Server). Remote servers without an Authorization header sign in with OAuth. docs
{
"context_servers": {
"snyk": {
"command": "npx",
"args": [
"-y",
"snyk@latest",
"mcp",
"-t",
"stdio"
]
}
}
}Add to opencode.json in the project (or ~/.config/opencode/opencode.json). docs
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"snyk": {
"type": "local",
"command": [
"npx",
"-y",
"snyk@latest",
"mcp",
"-t",
"stdio"
],
"enabled": true
}
}
}Add to ~/.kiro/settings/mcp.json (all projects) or .kiro/settings/mcp.json (this project). docs
{
"mcpServers": {
"snyk": {
"command": "npx",
"args": [
"-y",
"snyk@latest",
"mcp",
"-t",
"stdio"
]
}
}
}MCP Servers > Configure > Configure MCP Servers opens cline_mcp_settings.json; add this entry. docs
{
"mcpServers": {
"snyk": {
"command": "npx",
"args": [
"-y",
"snyk@latest",
"mcp",
"-t",
"stdio"
]
}
}
}FAQ
Is there an official Snyk MCP server?+
Yes: Snyk, maintained by Snyk.
How do I connect Snyk to Claude?+
In Claude Code, run the claude mcp add command shown above. In Claude Desktop, add the server to claude_desktop_config.json (Settings > Developer > Edit Config) and restart the app.
How do I use the Snyk MCP server in Cursor or VS Code?+
Open the Cursor or VS Code tab on the server above: it has the exact mcp.json entry and a one-click install link. The same server also works in Claude Code, Claude Desktop / claude.ai, ChatGPT, Cursor, VS Code and Codex.
Is it safe to give an AI agent access to Snyk?+
Start with the official server, a read-only or test account and approval prompts on for anything that writes. Content the agent reads from Snyk (tickets, messages, pages) can carry prompt-injection instructions, so don't auto-approve actions.
All security MCP servers · Agent skills · How MCP setup works in each client
MCP servers for similar apps: 1Password · Auth0 · Burp Suite · Clerk · Ghidra · HashiCorp Vault · npm · Okta · PyPI · Socket · SonarQube · Trivy · WorkOS