What is the Snyk MCP Server?

The Snyk MCP Server is a standalone Model Context Protocol server that allows you to integrate Snyk's security scanning capabilities with Claude desktop. It enables you to scan repositories and projects for vulnerabilities directly from Claude.

How do I scan a repository for vulnerabilities?

Use the command 'Scan repository [GitHub/GitLab URL] for security vulnerabilities'. Make sure to provide the full repository URL (e.g., https://github.com/owner/repo) and not a local file path.

What features does the Snyk MCP Server offer?

Key features include repository security scanning using GitHub/GitLab URLs, Snyk project scanning, integration with Claude desktop, token verification, multiple organization ID configuration options, and Snyk CLI integration.

How does the server determine the organization ID?

The server looks for the organization ID in the following order: Command argument, MCP settings environment variable (`SNYK_ORG_ID`), and finally the Snyk CLI configuration (`snyk config get org`).

How do I configure the Snyk MCP Server?

Configuration involves updating your Claude desktop config (`claude-config.json`) with your Snyk API token and optional organization ID. You can also configure the organization ID using the Snyk CLI.

Snyk

Name: Snyk
Author: sammcj

bysammcj

•

Security & Testing

Developer Tools

Deployment & DevOps

Enables security scanning functionality via a standalone Model Context Protocol server.

About

Snyk provides a standalone Model Context Protocol (MCP) server, designed to integrate Snyk security scanning into environments like Claude desktop. This server allows users to scan repositories for vulnerabilities by providing GitHub or GitLab URLs, scan specific Snyk projects, and verify Snyk token configurations. It supports multiple methods for configuring the Snyk organization ID, prioritizing command arguments, environment variables, and the Snyk CLI configuration. Furthermore, it integrates with the Snyk CLI to retrieve the default organization ID and display CLI configuration details during token verification, streamlining security workflows.

Key Features

Snyk project scanning
Snyk CLI integration for organization ID lookup
Repository security scanning using GitHub/GitLab URLs
Token verification
Multiple organization ID configuration options
Integration with Claude desktop
1 GitHub stars

Use Cases

Verifying Snyk API token configurations and organization ID settings.
Integrating Snyk security scanning into a Claude desktop environment.
Scanning repositories for security vulnerabilities directly from the command line using repository URLs.