Skip to main content
Watch: I Built an AI App Without Leaving Databricks

Auth and security - official Snyk server

Snyk MCP server

Local MCP server built into the Snyk CLI (snyk mcp) that lets coding agents run Snyk SAST, open source dependency, container, IaC and SBOM scans and pull the findings into the agent. It is the MCP part of Snyk Studio's secure-at-inception workflow. It runs locally from snyk (npm); the notes below cover how it authenticates.

Last verified 14 tools8 sources

Install

Claude Code

About Claude Code
Terminal
npx -y snyk@latest mcp configure --tool=claude-cli

Codex

About Codex
TOML
[mcp_servers.snyk-security]
command = "npx"
args = ["-y", "snyk@latest", "mcp", "-t", "stdio"]

Cursor

About Cursor
JSON
{
  "mcpServers": {
    "Snyk": {
      "command": "npx -y snyk@latest mcp -t stdio",
      "env": {}
    }
  }
}

Generic

JSON
{
  "mcpServers": {
    "Snyk": {
      "command": "npx",
      "args": ["-y", "snyk@latest", "mcp", "-t", "stdio"],
      "env": {}
    }
  }
}

Tools

snyk_auth
Authenticate the user with Snyk.
snyk_code_scan
Static Application Security Testing (SAST) of source code to find security vulnerabilities without executing it.
snyk_sca_scan
Analyze projects for open-source vulnerabilities and license issues by inspecting manifest files.
snyk_container_scan
Scan container images for known vulnerabilities in OS packages and application dependencies.
snyk_iac_scan
Analyze Infrastructure as Code files (Terraform, Kubernetes, CloudFormation, ARM, Serverless) for misconfigurations.
snyk_sbom_scan
Experimental. Analyze an existing SBOM file for known vulnerabilities in its open-source components.
snyk_aibom
Generate an AI Bill of Materials for Python projects in CycloneDX v1.6 JSON format (experimental).
snyk_package_health_check
Package health and security assessment.
snyk_secret_scan
Secret detection scan.
snyk_trust
Trust a given folder to allow Snyk to scan it.
snyk_logout
Clear the locally stored Snyk authentication token.
snyk_auth_status
Authentication status check.
snyk_version
Display the installed Snyk MCP version.
snyk_send_feedback
Send feedback to Snyk.

As documented on October 17, 2026. A running server reports its current list through tools/list.

Notes and caveats

  • Ships inside the Snyk CLI (npm package 'snyk'); docs state Snyk does not offer a hosted remote MCP server.
  • Auth is a Snyk account login through the snyk_auth tool (browser flow) plus per-folder trust.
  • Tool profiles: lite, full (default) and experimental, set via --profile or SNYK_MCP_PROFILE.
  • Snyk now recommends a hooks-based installer for Claude Code, Cursor, Codex, Gemini CLI and Copilot; the MCP config shown is labelled the legacy rules-based approach.
  • The Claude Code snippet is the documented npx configure command; SSE mode (snyk mcp -t sse, http://127.0.0.1:7695/sse) is also documented.
  • Snyk Code scanning needs Snyk Code enabled, and free plans have scan limits.
  • The studio-mcp repo is closed to public contributions.

More MCP servers for auth and security

Related reading

FAQ

What does the Snyk MCP server do?

Local MCP server built into the Snyk CLI (snyk mcp) that lets coding agents run Snyk SAST, open source dependency, container, IaC and SBOM scans and pull the findings into the agent. It is the MCP part of Snyk Studio's secure-at-inception workflow. The vendor documents 14 tools, including snyk_auth, snyk_code_scan, snyk_sca_scan and snyk_container_scan.

How do I add the Snyk MCP server to Claude Code?

Run npx -y snyk@latest mcp configure --tool=claude-cli, copied from Snyk's docs. This page also has snippets for Codex, Cursor and Generic.

Does the Snyk MCP server need authentication?

It uses a scheme other than OAuth or an API key, such as the session of the app or instance it runs in; the notes on this page describe it. Transport: stdio, SSE. Status: Unlabelled, last checked October 17, 2026.

Sources

Last verified against 8 Snyk pages, then re-checked independently.

Newsletter

New MCP servers, the week they ship

One email per week. New official MCP servers, the coding tools that support them and how developers wire them up.