SubmitLog in
c/security › command
0votes

Snyk MCP server (official)

MCP server
submitted by u/client to c/security · 0 uses

Run Snyk code, dependency, container and IaC security scans from your agent via the Snyk CLI.

Snyk's server runs through the Snyk CLI and lets an agent run Snyk Code (SAST), open-source dependency, container, IaC and SBOM scans on local projects, then explain and fix findings. If you are not already logged in to the CLI it opens a browser to authenticate with your Snyk account. Scans run locally; set --profile=lite or SNYK_MCP_PROFILE to reduce the tool set. A good guardrail for agent-written code and dependency upgrades.

Try asking:

  • "Scan this project for vulnerable dependencies and suggest upgrades."
  • "Run a Snyk Code scan on the files I just changed."
  • "Check this Dockerfile's base image for known vulnerabilities."

Sign-in: OAuth in your AI tool the first time you use it.

0 commentsreport

Install this MCP server

Optional: fill these in to put them straight into the snippet. They stay in your browser and are never sent to CommandVault.

Add to Cursor
Or add to .cursor/mcp.json (project) or ~/.cursor/mcp.json (everywhere)
{
  "mcpServers": {
    "snyk": {
      "command": "npx",
      "args": [
        "-y",
        "snyk@latest",
        "mcp",
        "-t",
        "stdio"
      ],
      "env": {
        "SNYK_MCP_PROFILE": "YOUR_SNYK_MCP_PROFILE"
      }
    }
  }
}

This runs a program on your computer. Check the command, arguments and source before you install it. Source Docs

More from c/security

See all of c/security →
0 comments

Log in to join the discussion.