MCP server

Socket MCP Server

Check npm, PyPI and other packages for supply-chain risk before the agent installs them. Official: built and maintained by Socket. It runs as a hosted remote server: nothing to install. Setup below for 13 clients (checked 2026-10-25). Repo and registry data checked 2026-10-24.
Maintainer
Official · Socket
Runs
Remote
GitHub
★ 137, last push 2026-10-23 (checked 2026-10-24)
License
MIT
URL
https://mcp.socket.dev/
Connects to
npm, PyPI, Socket

Install the Socket MCP Server

Pick your client. Remote first: nothing to install, and you sign in with OAuth where the client supports it. Config shapes checked against each client's docs on 2026-10-25.

Run in a terminal, then /mcp inside Claude Code to sign in. Add --scope project to share it via .mcp.json. docs

claude mcp add --transport http socket https://mcp.socket.dev/

Security notes

  • The remote server runs at mcp.socket.dev, hosted by Socket. You sign in with OAuth in clients that support it, and it acts with your account's permissions.
  • Burp Suiteofficial · ★ 1.3k

    Use Burp Suite from an agent: send requests, read proxy history and scanner issues.

  • SonarQubeofficial · ★ 672

    Code quality and security issues, quality gates and metrics from SonarQube Cloud or Server.

  • Auth0official · ★ 121

    Manage Auth0 applications, APIs, actions, logs and forms from the agent.

  • Oktaofficial · ★ 74

    Self-hosted server to manage Okta users, groups, apps, policies and system logs.

  • HashiCorp Vaultofficial · ★ 65

    Read and write Vault secrets and manage mounts in HashiCorp Vault.

  • Trivyofficial · ★ 53

    Scan filesystems, images and repos for vulnerabilities and misconfigurations with Trivy.

  • Local server in the 1Password app to manage project environment variables, with approval prompts.

  • Clerkofficial

    Hosted server to manage Clerk apps, users and domains, plus Clerk SDK snippets.

Comparing servers for one product? npm MCP servers · PyPI MCP servers

FAQ

What does the Socket MCP Server do?+

Check npm, PyPI and other packages for supply-chain risk before the agent installs them.

Is the Socket MCP server official?+

Official: built and maintained by Socket.

How do I add Socket to Claude Code?+

Run: claude mcp add --transport http socket https://mcp.socket.dev/, then /mcp inside Claude Code to sign in. Add --scope project to share it with your team through .mcp.json.

How do I use the Socket MCP server in Cursor or VS Code?+

Open the Cursor or VS Code tab above: it has the mcp.json entry and a one-click install link. Cursor uses the "mcpServers" key; VS Code uses "servers" and needs a type ("http").

Does Socket work in ChatGPT and claude.ai?+

Yes, it has a remote URL (https://mcp.socket.dev/). In claude.ai add it under Customize > Connectors > Add custom connector; in ChatGPT under chatgpt.com/plugins > Add custom MCP server.

What are the alternatives to the Socket MCP server?+

Other security MCP servers: Burp Suite, SonarQube, Auth0, Okta and HashiCorp Vault.

All MCP servers · What is an MCP server? · Agent skills