Socket

listing.about

Socket connects your assistant to Socket's dependency security data. It scores packages for vulnerabilities, malware, supply chain risk, quality, maintenance and license issues across ecosystems such as npm, PyPI, Cargo, Maven, NuGet, RubyGems and Go. It can also list organization alerts, read the threat feed, and browse or grep the files a package ships.

A hosted endpoint is available at https://mcp.socket.dev/ over streamable HTTP, and the README describes an OAuth sign-in through your MCP client. You can also self-host the npm package @socketsecurity/mcp with a Socket API token and Node.js 24 or later. Sessions on the hosted server may occasionally need a fresh initialize.

listing.can

• Score packages for security, quality and maintenance
• Audit dependencies found in manifests and code imports
• List Socket organizations you belong to
• List security alerts with severity and status filters
• Browse the threat feed for malware and typosquats
• List files published in a package
• Read or grep a single file inside a package

listing.tools 7

• depscorelisting.hint.ro

  Get dependency quality and security scores for packages; use 'unknown' when the version is not…

• organizationslisting.hint.ro

  List the Socket organizations the signed-in user belongs to and their org_slug values.

• alertslisting.hint.ro

  List latest security alerts for an organization with filters and pagination.

• threat_feedlisting.hint.ro

  Look up recently flagged packages such as malware and typosquats, with filters and pagination.

• package_fileslisting.hint.ro

  List the files and sizes published in a package across supported ecosystems.

• package_file_contentslisting.hint.ro

  Read a single file from a package, up to 1 MB of text.

• package_file_greplisting.hint.ro

  Search a package file for lines matching a JavaScript regular expression.

listing.prov.live_on listing.prov.hints

listing.prompts

• Check the security score for express version 4.18.2

• Audit the dependencies in my package.json for risky packages

• Show the latest high severity alerts for my Socket organization

• List the files in the npm package left-pad before I install it

listing.setup.h

listing.setup.remote

claude mcp add --transport http socket https://mcp.socket.dev/

https://mcp.socket.dev/

{
  "mcpServers": {
    "socket": {
      "url": "https://mcp.socket.dev/"
    }
  }
}

code --add-mcp '{"name":"socket","type":"http","url":"https://mcp.socket.dev/"}'

{
  "servers": {
    "socket": {
      "type": "http",
      "url": "https://mcp.socket.dev/"
    }
  }
}

{
  "mcpServers": {
    "socket": {
      "serverUrl": "https://mcp.socket.dev/"
    }
  }
}

codex mcp add socket --url https://mcp.socket.dev/

[mcp_servers.socket]
url = "https://mcp.socket.dev/"

gemini mcp add --transport http socket https://mcp.socket.dev/

{
  "mcpServers": {
    "socket": {
      "type": "http",
      "url": "https://mcp.socket.dev/"
    }
  }
}

listing.faq

listing.em.h

listing.em.lead listing.em.how

listing.em.badge listing.em.widget iframe JSON

listing.em.badge

Markdown

[![Socket on mcp.tc](https://mcp.tc/i/socket/badge.svg)](https://mcp.tc/i/socket)

HTML

<a href="https://mcp.tc/i/socket"><img src="https://mcp.tc/i/socket/badge.svg" alt="Socket on mcp.tc" height="20"></a>

listing.em.badge_note

listing.em.widget

HTML

<script src="https://mcp.tc/w/socket.js" async></script>

listing.em.widget_note

iframe

HTML

<iframe src="https://mcp.tc/embed/socket" title="Socket on mcp.tc" width="420" height="200" loading="lazy" allow="clipboard-write" style="border:0;border-radius:8px;max-width:100%"></iframe>

listing.em.iframe_note

JSON

listing.em.json

https://mcp.tc/i/socket.json

listing.em.fields