English Français العربية

io.snyk/mcp

Registre officiel Sécurité

Easily find and fix security issues in your applications leveraging Snyk platform capabilities.

Code source Documentation

Installation

Ajoutez ceci à la configuration MCP de votre client (Claude Desktop : claude_desktop_config.json ; Cursor : .cursor/mcp.json ; VS Code et les autres utilisent la même forme « mcpServers »).

NPM package snyk
Claude Code 
claude mcp add io-snyk-mcp -- npx -y snyk@1.1304.2 mcp -t stdio
Configuration JSON (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "io-snyk-mcp": {
            "command": "npx",
            "args": [
                "-y",
                "snyk@1.1304.2",
                "mcp",
                "-t",
                "stdio"
            ]
        }
    }
}

Documentation

Tirée du README du projet sur GitHub, actualisée chaque semaine. Les liens ouvrent GitHub.

Snyk Studio MCP

MCP (Model Context Protocol) is an open protocol that standardizes how applications share context with large language models.

MCP can provide AI systems with additional information needed to generate accurate and relevant responses for use cases where the AI systems do not have the context, by integrating the AI systems with tools and platforms that have specific capabilities.

You can integrate Snyk MCP into MCP-supporting tools to provide Snyk security context.

Snyk is introducing an MCP server as part of the Snyk CLI. This allows MCP-enabled agentic tools to integrate Snyk security scanning capabilities directly, thus bridging the gap between security scanning and AI-assisted workflows.

In environments or applications that use MCP, you can use the snyk mcp CLI command to:

  • Invoke Snyk scans:\ Trigger CLI security scans for code, dependencies, or configurations in your codebase in your current MCP context.

  • Retrieve results:\ Obtain Snyk security findings directly in your MCP-enabled tool or environment.

    The Snyk MCP server supports integrating the following Snyk security tools into an AI system:

  • snyk_sca_scan (Open Source scan)
  • snyk_code_scan (Code scan)
  • snyk_iac_scan (IaC scan)
  • snyk_container_scan (Container scan)
  • snyk_sbom_scan (SBOM file scan)
  • snyk_secret_scan (Secret detection scan)
  • snyk_aibom (Create AIBOM)
  • snyk_package_health_check (Package health and security assessment)
  • snyk_trust (Trust a given folder before running a scan)
  • snyk_auth (authentication)
  • snyk_logout (logout)
  • snyk_auth_status (authentication status check)
  • snyk_version (version information)

Running snyk_sca_scan may execute third-party ecosystem tools (for example, Gradle or Maven) on your machine to fetch the project's dependency tree.

For more details, see the Snyk MCP installation, configuration and startup and Troubleshooting for the Snyk MCP server pages.

This repository is closed to public contributions.

Questions fréquentes

Qu'est-ce que io.snyk/mcp ?

Easily find and fix security issues in your applications leveraging Snyk platform capabilities.

Comment installer io.snyk/mcp ?

Il s'exécute sur votre machine. Dans Claude Code : claude mcp add io-snyk-mcp -- npx -y snyk@1.1304.2 mcp -t stdio. Pour les autres clients, collez la configuration JSON de cette page dans leurs réglages MCP.

Faut-il une clé API pour io.snyk/mcp ?

Son entrée au registre n'indique aucune clé ni secret obligatoire. Certaines fonctions peuvent tout de même demander un compte auprès du service auquel il se connecte.

io.snyk/mcp est-il open source ?

Oui. Son code est sur GitHub sous licence Apache-2.0.

Qui maintient io.snyk/mcp ?

Il est publié par snyk. AI.tn le référence sans le maintenir ni le recommander.

Issu du registre MCP officiel. Être listé n'est pas une recommandation : vérifiez le code et les permissions d'un serveur avant de lui donner accès à vos données.