MCP server
Snyk MCP Server
- Maintainer
- Official · Snyk
- Runs
- Local (stdio)
- Docs
- docs.snyk.io
- Registry
- io.snyk/mcp
- Connects to
- Snyk
- DevHunt
- Snyk on DevHunt
Install the Snyk MCP Server
Pick your client. Each tab starts the same local command. Config shapes checked against each client's docs on 2026-10-25.
Run in a terminal. Everything after -- is the command that starts the server. docs
claude mcp add --transport stdio snyk -- npx -y snyk@latest mcp -t stdio
Claude Desktop only: Settings > Developer > Edit Config opens claude_desktop_config.json. Add this, save and restart the app. docs
{
"mcpServers": {
"snyk": {
"command": "npx",
"args": [
"-y",
"snyk@latest",
"mcp",
"-t",
"stdio"
]
}
}
}Add to ~/.cursor/mcp.json (all projects) or .cursor/mcp.json (this project), or use the install button. docs
{
"mcpServers": {
"snyk": {
"command": "npx",
"args": [
"-y",
"snyk@latest",
"mcp",
"-t",
"stdio"
]
}
}
}Add to .vscode/mcp.json (note the "servers" key and the type), or use the install button. Command Palette > "MCP: Open User Configuration" for all workspaces. docs
{
"servers": {
"snyk": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"snyk@latest",
"mcp",
"-t",
"stdio"
]
}
}
}Run codex mcp add snyk -- npx -y snyk@latest mcp -t stdio, or add this to ~/.codex/config.toml. docs
[mcp_servers.snyk] command = "npx" args = ["-y", "snyk@latest", "mcp", "-t", "stdio"]
Run in a terminal (-s user adds it for all projects; the default is this project). docs
gemini mcp add -s user snyk npx -- -y snyk@latest mcp -t stdio
Run in a terminal; it writes ~/.copilot/mcp-config.json. docs
copilot mcp add snyk -- npx -y snyk@latest mcp -t stdio
Add to mcp_config.json: ~/.config/devin/mcp_config.json on macOS and Linux (older installs: ~/.codeium/windsurf/mcp_config.json), %APPDATA%\devin\ on Windows. docs
{
"mcpServers": {
"snyk": {
"command": "npx",
"args": [
"-y",
"snyk@latest",
"mcp",
"-t",
"stdio"
]
}
}
}Add to Zed's settings.json (or Settings > AI > MCP Servers > Add Server). Remote servers without an Authorization header sign in with OAuth. docs
{
"context_servers": {
"snyk": {
"command": "npx",
"args": [
"-y",
"snyk@latest",
"mcp",
"-t",
"stdio"
]
}
}
}Add to opencode.json in the project (or ~/.config/opencode/opencode.json). docs
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"snyk": {
"type": "local",
"command": [
"npx",
"-y",
"snyk@latest",
"mcp",
"-t",
"stdio"
],
"enabled": true
}
}
}Add to ~/.kiro/settings/mcp.json (all projects) or .kiro/settings/mcp.json (this project). docs
{
"mcpServers": {
"snyk": {
"command": "npx",
"args": [
"-y",
"snyk@latest",
"mcp",
"-t",
"stdio"
]
}
}
}MCP Servers > Configure > Configure MCP Servers opens cline_mcp_settings.json; add this entry. docs
{
"mcpServers": {
"snyk": {
"command": "npx",
"args": [
"-y",
"snyk@latest",
"mcp",
"-t",
"stdio"
]
}
}
}Security notes
- The local server runs with your user's permissions (the command starts it on your machine). The package is pinned to @latest, so each start can pull a new version; pin a version if you want to review updates.
Alternatives
- Burp Suiteofficial · ★ 1.3k
Use Burp Suite from an agent: send requests, read proxy history and scanner issues.
- SonarQubeofficial · ★ 672
Code quality and security issues, quality gates and metrics from SonarQube Cloud or Server.
- Socketofficial · ★ 137
Check npm, PyPI and other packages for supply-chain risk before the agent installs them.
- Auth0official · ★ 121
Manage Auth0 applications, APIs, actions, logs and forms from the agent.
- Oktaofficial · ★ 74
Self-hosted server to manage Okta users, groups, apps, policies and system logs.
- HashiCorp Vaultofficial · ★ 65
Read and write Vault secrets and manage mounts in HashiCorp Vault.
- Trivyofficial · ★ 53
Scan filesystems, images and repos for vulnerabilities and misconfigurations with Trivy.
- 1Password Environmentsofficial
Local server in the 1Password app to manage project environment variables, with approval prompts.
FAQ
What does the Snyk MCP Server do?+
Snyk code, dependency, container and IaC scans, built into the Snyk CLI.
Is the Snyk MCP server official?+
Official: built and maintained by Snyk.
How do I add Snyk to Claude Code?+
Run: claude mcp add snyk -- npx -y snyk@latest mcp -t stdio. Add --scope project to share it with your team through .mcp.json.
How do I use the Snyk MCP server in Cursor or VS Code?+
Open the Cursor or VS Code tab above: it has the mcp.json entry and a one-click install link. Cursor uses the "mcpServers" key; VS Code uses "servers" and needs a type ("stdio").
Does Snyk work in ChatGPT and claude.ai?+
No: it runs locally over stdio, and ChatGPT and claude.ai only connect to remote servers. Use it in Claude Desktop, Claude Code, Cursor, VS Code or another client that can start a local process.
What are the alternatives to the Snyk MCP server?+
Other security MCP servers: Burp Suite, SonarQube, Socket, Auth0 and Okta.