MCP server
Socket MCP Server
- Maintainer
- Official · Socket
- Runs
- Remote
- GitHub
- ★ 137, last push 2026-10-23 (checked 2026-10-24)
- License
- MIT
- URL
- https://mcp.socket.dev/
Install the Socket MCP Server
Pick your client. Remote first: nothing to install, and you sign in with OAuth where the client supports it. Config shapes checked against each client's docs on 2026-10-25.
Run in a terminal, then /mcp inside Claude Code to sign in. Add --scope project to share it via .mcp.json. docs
claude mcp add --transport http socket https://mcp.socket.dev/
Customize > Connectors > Add > Add custom connector, paste this URL and sign in. It syncs to Claude Desktop and mobile. docs
https://mcp.socket.dev/
The free plan allows one custom connector. On Team and Enterprise an owner adds it under Organization settings > Connectors.
chatgpt.com/plugins > + > Add custom MCP server, paste the URL, set up sign-in and create it as a plugin. Then @-mention it in a chat. docs
https://mcp.socket.dev/
Workspace admins can turn custom MCP plugins off.
Add to ~/.cursor/mcp.json (all projects) or .cursor/mcp.json (this project), or use the install button. docs
{
"mcpServers": {
"socket": {
"url": "https://mcp.socket.dev/"
}
}
}Add to .vscode/mcp.json (note the "servers" key and the type), or use the install button. Command Palette > "MCP: Open User Configuration" for all workspaces. docs
{
"servers": {
"socket": {
"type": "http",
"url": "https://mcp.socket.dev/"
}
}
}Run codex mcp add socket --url https://mcp.socket.dev/ (then codex mcp login socket), or add this to ~/.codex/config.toml. The CLI, IDE extension and Codex app share it. docs
[mcp_servers.socket] url = "https://mcp.socket.dev/"
Run in a terminal (-s user adds it for all projects), then /mcp auth to sign in. In ~/.gemini/settings.json the key is httpUrl. docs
gemini mcp add -s user --transport http socket https://mcp.socket.dev/
Run in a terminal; it writes ~/.copilot/mcp-config.json. docs
copilot mcp add --transport http socket https://mcp.socket.dev/
Add to mcp_config.json: ~/.config/devin/mcp_config.json on macOS and Linux (older installs: ~/.codeium/windsurf/mcp_config.json), %APPDATA%\devin\ on Windows. docs
{
"mcpServers": {
"socket": {
"serverUrl": "https://mcp.socket.dev/"
}
}
}Add to Zed's settings.json (or Settings > AI > MCP Servers > Add Server). Remote servers without an Authorization header sign in with OAuth. docs
{
"context_servers": {
"socket": {
"url": "https://mcp.socket.dev/"
}
}
}Add to opencode.json in the project (or ~/.config/opencode/opencode.json). Sign in with opencode mcp auth socket. docs
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"socket": {
"type": "remote",
"url": "https://mcp.socket.dev/",
"enabled": true
}
}
}Add to ~/.kiro/settings/mcp.json (all projects) or .kiro/settings/mcp.json (this project). docs
{
"mcpServers": {
"socket": {
"url": "https://mcp.socket.dev/"
}
}
}MCP Servers > Configure > Configure MCP Servers opens cline_mcp_settings.json; add this entry. docs
{
"mcpServers": {
"socket": {
"type": "streamableHttp",
"url": "https://mcp.socket.dev/"
}
}
}Security notes
- The remote server runs at mcp.socket.dev, hosted by Socket. You sign in with OAuth in clients that support it, and it acts with your account's permissions.
Alternatives
- Burp Suiteofficial · ★ 1.3k
Use Burp Suite from an agent: send requests, read proxy history and scanner issues.
- SonarQubeofficial · ★ 672
Code quality and security issues, quality gates and metrics from SonarQube Cloud or Server.
- Auth0official · ★ 121
Manage Auth0 applications, APIs, actions, logs and forms from the agent.
- Oktaofficial · ★ 74
Self-hosted server to manage Okta users, groups, apps, policies and system logs.
- HashiCorp Vaultofficial · ★ 65
Read and write Vault secrets and manage mounts in HashiCorp Vault.
- Trivyofficial · ★ 53
Scan filesystems, images and repos for vulnerabilities and misconfigurations with Trivy.
- 1Password Environmentsofficial
Local server in the 1Password app to manage project environment variables, with approval prompts.
- Clerkofficial
Hosted server to manage Clerk apps, users and domains, plus Clerk SDK snippets.
Comparing servers for one product? npm MCP servers · PyPI MCP servers
FAQ
What does the Socket MCP Server do?+
Check npm, PyPI and other packages for supply-chain risk before the agent installs them.
Is the Socket MCP server official?+
Official: built and maintained by Socket.
How do I add Socket to Claude Code?+
Run: claude mcp add --transport http socket https://mcp.socket.dev/, then /mcp inside Claude Code to sign in. Add --scope project to share it with your team through .mcp.json.
How do I use the Socket MCP server in Cursor or VS Code?+
Open the Cursor or VS Code tab above: it has the mcp.json entry and a one-click install link. Cursor uses the "mcpServers" key; VS Code uses "servers" and needs a type ("http").
Does Socket work in ChatGPT and claude.ai?+
Yes, it has a remote URL (https://mcp.socket.dev/). In claude.ai add it under Customize > Connectors > Add custom connector; in ChatGPT under chatgpt.com/plugins > Add custom MCP server.
What are the alternatives to the Socket MCP server?+
Other security MCP servers: Burp Suite, SonarQube, Auth0, Okta and HashiCorp Vault.