Snyk
About
Enhance security posture by embedding Snyk vulnerability scanning directly into agentic workflows.
Details
- Author
- snyk
- Downloads
- 1,011
- Categories
- Developer Tools, Security
Jump to
- Trigger security scans for open‑source, code, and configuration issues.
- Retrieve Snyk findings directly in your MCP‑enabled environment.
- Supports stdio and SSE transport protocols.
- Provides authentication (snyk_auth) and version (snyk_version) tools.
- Early Access feature – usage and parameters may evolve.
- No extra dependencies beyond the Snyk CLI.
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
SnykCommand (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
Install the Snyk CLI (v1.1296.2 or later). Start the MCP server with snyk mcp -t stdio --experimental or snyk mcp -t sse --experimental. Then configure the server in your MCP client’s mcpconfig.json file – using the command/args fields for stdio transport, or the url field for SSE. Once connected, you can invoke tools such as snyk_sca_test (open source scan) or snyk_code_test (code scan) from your AI assistant or IDE.
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"snyk": {
"Snyk Security Scanner": {
"command": "snyk",
"args": [
"mcp",
"-t",
"stdio",
"--experimental"
]
}
}
}
}McpServers
{
"Snyk Security Scanner": {
"command": "snyk",
"args": [
"mcp",
"-t",
"stdio",
"--experimental"
]
}
}Snyk MCP server
To bridge the gap between security scanning and emerging AI-assisted workflows, Snyk is introducing an MCP server as part of the Snyk CLI. This will allow MCP-enabled tools and contexts to integrate Snyk security scanning capabilities directly.
In environments or applications that use MCP, you can use the snyk mcp CLI command to:
- Invoke Snyk scans:\
Trigger security scans for code, dependencies, or configurations in your codebase in your current MCP context.
- Retrieve results:\
Obtain Snyk security findings directly in your MCP-enabled tool or environment.
To use the Snyk MCP server, download and install the Snyk CLI v1.1296.2 or later following the steps on the installation page. No other dependencies are needed. Snyk recommends always using the latest version of the CLI.
The snyk mcp command is available in Early Access, under the --experimental flag for the following reasons:
- MCP is a new and evolving standard.
- The snyk mcp command is an early implementation of integrating Snyk security scanning into the MCP ecosystem.
- Snyk wants to gather feedback on the benefits of MCP as an integration pattern for Snyk security.
Because the snyk mcp command is an experimental feature, the specific usage, parameters, and output related to this command may evolve as both MCP and this Snyk integration mature. Changes are possible before a general release.
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
