Snykvf.sr

listing.by · home.legend.verified

Scan code, dependencies, containers, IaC and secrets for vulnerabilities with Snyk from your AI assistant.

state.local.long (state.local.title)listing.badge.runs_with

listing.install

listing.local.explain

npx -y snyk@latest mcp -t stdio

listing.local.needs listing.local.note

act.add_to a11y.new_tabact.add_to a11y.new_tab

listing.share.h

listing.share.p_local

mcp.tc/i/snyk

listing.about

Snyk Studio is the MCP server built into the Snyk CLI. It lets an MCP-enabled assistant run Snyk scans on your local codebase and read the findings. Scans cover open source dependencies, source code, infrastructure as code, containers, SBOM files and secrets. It can also create an AIBOM and check the health of a package.

It runs locally over stdio with the command npx -y snyk@latest mcp -t stdio. You sign in to Snyk through the browser with snyk auth or the snyk_auth tool, or you set SNYK_TOKEN. The dependency scan may run ecosystem tools such as Gradle or Maven on your machine to read the dependency tree.

listing.can

  • Scan open source dependencies for known vulnerabilities
  • Run static analysis on source code
  • Scan IaC files and container images
  • Scan SBOM files and detect secrets
  • Create an AIBOM for a project
  • Check the health and security of a package
  • Sign in, sign out and check auth status

listing.tools

listing.notools.oauth

listing.prompts

  • Scan this project's dependencies for vulnerabilities with Snyk.

  • Run a Snyk code scan on the current repository and list high severity issues.

  • Check my Terraform files for misconfigurations using Snyk IaC.

  • Is the package lodash healthy and safe to use?

listing.setup.h

listing.setup.local

Claude Code

  1. Run this in a terminal, in your project folder:
claude mcp add --transport stdio snyk -- npx -y snyk@latest mcp -t stdio
  1. Start Claude Code and type /mcp. snyk should show as connected.

Add --scope user to make it available in every project.

Claude Desktop

  1. Open Settings → Developer → Edit Config. It opens claude_desktop_config.json. Add:
claude_desktop_config.json
{
  "mcpServers": {
    "snyk": {
      "command": "npx",
      "args": [
        "-y",
        "snyk@latest",
        "mcp",
        "-t",
        "stdio"
      ]
    }
  }
}
  1. Save the file and restart Claude Desktop.

Needs Node.js on your computer. The file lives in ~/Library/Application Support/Claude/ on macOS and %APPDATA%\Claude\ on Windows.

Cursor

Add to Cursor a11y.new_tab

Or add it by hand to ~/.cursor/mcp.json (all projects) or .cursor/mcp.json (this project):

mcp.json
{
  "mcpServers": {
    "snyk": {
      "command": "npx",
      "args": [
        "-y",
        "snyk@latest",
        "mcp",
        "-t",
        "stdio"
      ]
    }
  }
}

Needs Node.js on your computer.

VS Code

Install in VS Code a11y.new_tab

Or from a terminal:

code --add-mcp '{"name":"snyk","type":"stdio","command":"npx","args":["-y","snyk@latest","mcp","-t","stdio"]}'

Or commit it to the repo in .vscode/mcp.json:

.vscode/mcp.json
{
  "servers": {
    "snyk": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "snyk@latest",
        "mcp",
        "-t",
        "stdio"
      ]
    }
  }
}

Needs Node.js on your computer.

Devin Desktop

  1. Add it to ~/.config/devin/mcp_config.json (macOS and Linux) or %APPDATA%\devin\mcp_config.json (Windows):
mcp_config.json
{
  "mcpServers": {
    "snyk": {
      "command": "npx",
      "args": [
        "-y",
        "snyk@latest",
        "mcp",
        "-t",
        "stdio"
      ]
    }
  }
}
  1. Refresh the MCP server list in Cascade.

Devin Desktop is the new name for Windsurf.

Codex

codex mcp add snyk -- npx -y snyk@latest mcp -t stdio

Or edit ~/.codex/config.toml directly:

config.toml
[mcp_servers.snyk]
command = "npx"
args = ["-y", "snyk@latest", "mcp", "-t", "stdio"]

Needs Node.js on your computer.

Gemini CLI

gemini mcp add snyk npx -- -y snyk@latest mcp -t stdio

This adds it to the current project. Add -s user to use it everywhere.

Any client

Most clients that start local servers accept this shape:

{
  "mcpServers": {
    "snyk": {
      "command": "npx",
      "args": [
        "-y",
        "snyk@latest",
        "mcp",
        "-t",
        "stdio"
      ]
    }
  }
}

Zed puts servers under context_servers in its settings, with the same command, args and env fields.

Needs Node.js on your computer.

listing.faq

Can I paste mcp.tc/i/snyk into my MCP client?

No. Snyk runs on your own computer, started by your client, so it has no web address to connect to. The quick link is the page to share; the install command is npx -y snyk@latest mcp -t stdio.

Does Snyk need an API key?

No. It doesn't declare any keys or environment variables. It runs with your user account's permissions, so check what its tools can reach.

Is Snyk a remote or a local server?

Local. Your client starts it as a process on your computer with npx -y snyk@latest mcp -t stdio, which needs Node.js.

What can Snyk do?

You can scan open source dependencies for known vulnerabilities, run static analysis on source code and scan IaC files and container images.

Which clients can use it?

Any client that starts local servers: Claude Code, Claude Desktop, Cursor, VS Code, Devin Desktop, Codex, Gemini CLI, Zed and others. claude.ai and ChatGPT only connect to remote servers.

Who wrote this page?

mcp.tc's robot read Snyk's public metadata (its package and repository pages), and an AI model drafted the text from it. A person reviews anything the checks can't confirm. The text can still be wrong, so if you spot a mistake, use Report this listing on this page.

listing.em.h

listing.em.lead_local listing.em.how

listing.em.badge

em.prev_lightem.prev_dark
Markdown
[![Snyk on mcp.tc](https://mcp.tc/i/snyk/badge.svg)](https://mcp.tc/i/snyk)
HTML
<a href="https://mcp.tc/i/snyk"><img src="https://mcp.tc/i/snyk/badge.svg" alt="Snyk on mcp.tc" height="20"></a>

listing.em.badge_note

listing.em.widget

HTML
<script src="https://mcp.tc/w/snyk.js" async></script>

listing.em.widget_note

iframe

HTML
<iframe src="https://mcp.tc/embed/snyk" title="Snyk on mcp.tc" width="420" height="200" loading="lazy" allow="clipboard-write" style="border:0;border-radius:8px;max-width:100%"></iframe>

listing.em.iframe_note

JSON

listing.em.json_local

https://mcp.tc/i/snyk.json

listing.em.fields

listing.related

listing.more_in

  • Snyk API & Web

    Snyk

    state.local.label (state.local.title)

    Onboard scan targets, run DAST scans and triage vulnerability findings in Snyk API & Web from your AI assistant.

    mcp.tc/i/snyk-api-web

  • Auth0vf.sr

    Auth0 (Okta)

    state.local.label (state.local.title)

    Manage Auth0 applications, APIs, actions, logs, forms and client grants in your tenant using natural language.

    mcp.tc/i/auth0

  • Black Duck Signal

    Black Duck

    state.local.label (state.local.title)

    Scan code changes or specific files for security vulnerabilities with Black Duck Signal AI analysis, from your coding assistant.

    mcp.tc/i/black-duck

  • IDA Pro MCP

    mrexodia

    state.local.label (state.local.title)

    Reverse engineer binaries in IDA Pro: decompile, rename, comment and retype functions through your AI assistant.

    mcp.tc/i/ida-pro

  • Burp Suite

    PortSwigger

    state.local.label (state.local.title)

    Drive Burp Suite from AI clients through an extension that exposes Burp over MCP, with an SSE endpoint and a bundled stdio proxy.

    mcp.tc/i/burp-suite

  • CrowdStrike Falconvf.sr

    CrowdStrike

    state.local.label (state.local.title)

    Query CrowdStrike Falcon detections, hosts, threat intel, vulnerabilities and more from your AI assistant.

    mcp.tc/i/crowdstrike-falcon

listing.disclaimer_checked