drio
Open app

Snyk MCP Server

Source

MCP Server for Snyk Security Scanning

Catalog onlyCatalog onlySTDIO

Overview

Snyk MCP Server is a standalone Model Context Protocol server designed for Snyk security scanning functionality, currently in alpha stage.

To use the Snyk MCP Server, configure your Claude desktop settings with your Snyk API token and organization ID, then use commands to scan repositories or Snyk projects for security vulnerabilities.

  • Repository security scanning using GitHub/GitLab URLs - Snyk project scanning - Integration with Claude desktop - Token verification - Multiple organization ID configuration options - Snyk CLI integration for organization ID lookup
  1. Scanning GitHub or GitLab repositories for security vulnerabilities.
  2. Verifying Snyk API token configurations.
  3. Integrating with existing Snyk CLI setups for seamless organization ID management.

Add to your AI client

Use these steps to connect Snyk MCP Server in Cursor, Claude, VS Code, and other MCP-compatible apps. The same JSON appears in the Use with menu above for one-click copy.

Cursor

Add this to your .cursor/mcp.json file in your project root, then restart Cursor.

.cursor/mcp.json

{
  "mcpServers": {
    "mcp-snyk-sammcj": {
      "command": "npx",
      "args": [
        "-y",
        "@modelcontextprotocol/server-mcp-snyk-sammcj"
      ]
    }
  }
}

Claude Desktop

Add this server entry to the mcpServers object in your Claude Desktop config, then restart the app.

~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows)

{
  "mcpServers": {
    "mcp-snyk-sammcj": {
      "command": "npx",
      "args": [
        "-y",
        "@modelcontextprotocol/server-mcp-snyk-sammcj"
      ]
    }
  }
}

Claude Code

Add this to your project's .mcp.json file. Claude Code will detect it automatically.

.mcp.json (project root)

{
  "mcpServers": {
    "mcp-snyk-sammcj": {
      "command": "npx",
      "args": [
        "-y",
        "@modelcontextprotocol/server-mcp-snyk-sammcj"
      ]
    }
  }
}

VS Code (Copilot)

Add this to your .vscode/mcp.json file. Requires the GitHub Copilot extension with MCP support enabled.

.vscode/mcp.json

{
  "servers": {
    "mcp-snyk-sammcj": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@modelcontextprotocol/server-mcp-snyk-sammcj"
      ]
    }
  }
}

Windsurf

Add this to your Windsurf MCP config file, then restart Windsurf.

~/.codeium/windsurf/mcp_config.json

{
  "mcpServers": {
    "mcp-snyk-sammcj": {
      "command": "npx",
      "args": [
        "-y",
        "@modelcontextprotocol/server-mcp-snyk-sammcj"
      ]
    }
  }
}

Cline

Open Cline settings, navigate to MCP Servers, and add this server configuration.

Cline MCP Settings (via UI)

{
  "mcpServers": {
    "mcp-snyk-sammcj": {
      "command": "npx",
      "args": [
        "-y",
        "@modelcontextprotocol/server-mcp-snyk-sammcj"
      ]
    }
  }
}

FAQ

Is the Snyk MCP Server finished?

No, it is currently in alpha and not yet finished.

How do I verify my Snyk token?

You can verify your Snyk token by using the command: `Verify my Snyk token configuration`.

Can I use local file paths for scanning?

No, you must provide the actual repository URL from GitHub or GitLab.7:["$","div",null,{"className":"container mx-auto flex flex-col gap-4","children":["$L26","$L27",["$","$L28",null,{"currentProject":{"id":2038,"uuid":"05613961-d676-4450-b3dd-0f75df4d09fa","name":"mcp-snyk","title":"Snyk MCP Server","description":"MCP Server for Snyk Security Scanning","avatar_url":"https://avatars.githubusercontent.com/u/862951?v=4","created_at":"2025-03-05T08:02:01.656+00:00","updated_at":"2025-03-12T10:18:26.864+00:00","status":"created","author_name":"sammcj","author_avatar_url":"https://avatars.githubusercontent.com/u/862951?v=4","tags":"snyk,security-scanning,mcp-server","category":"security","is_featured":false,"sort":1,"url":"https://github.com/sammcj/mcp-snyk","target":"_self","content":"$29","summary":"$2a","img_url":null,"type":null,"metadata":"{\"star\":\"1\",\"license\":\"\",\"language\":\"JavaScript\",\"is_official\":false,\"latest_commit_time\":\"2025-02-24 07:54:38\"}","user_uuid":null,"tools":null,"sse_url":null,"sse_provider":null,"sse_params":null,"is_official":false,"server_command":null,"server_params":null,"server_config":null,"allow_call":false,"is_innovation":false,"is_dxt":false,"dxt_manifest":null,"dxt_file_url":null,"is_audit":false},"randomProjects":[],"currentServerKey":"$undefined"}]]}]

Security