# Snyk MCP

> Snyk's local MCP server: your agent scans code, dependencies, containers and IaC for security issues, then fixes and rescans.

Snyk's MCP server is built into the Snyk CLI. It lets your agent run Snyk security scans on the project you're working in and read the findings in the chat, so it can fix issues in the code it writes and rescan to check the fix. It's the scanning layer of Snyk Studio, Snyk's security setup for AI coding agents.

What you can do with it
- Scan your own code for vulnerabilities with Snyk Code (SAST)
- Scan dependencies for open-source vulnerabilities and license issues with Snyk Open Source
- Check Terraform, Kubernetes, CloudFormation, ARM and Serverless Framework files for misconfigurations
- Scan container images and SBOM files for known vulnerabilities
- Check a package's health (vulnerabilities, maintenance, community and popularity) before adding it, for npm, PyPI, NuGet, Maven and Go

How it connects
It runs on your machine through the Snyk CLI: npx -y snyk@latest mcp -t stdio, or snyk mcp -t stdio if you already have the CLI. Snyk doesn't offer a hosted server, because scans need your local files. The first time, sign in to Snyk and trust the project folder; you can also pass a Snyk token in the SNYK_TOKEN environment variable. Snyk has setup guides for Claude Code, Cursor, Codex CLI, Gemini CLI and more, and it works in any agent that runs local MCP servers.

Good to know
- You need a Snyk account.
- Profiles choose which tools it offers: Lite keeps the essential scans, Full (the default) has every stable tool, and Experimental adds tools still being evaluated. Set one with --profile or SNYK_MCP_PROFILE.
- Open-source scans may run your build tools, such as Gradle or Maven, to read the dependency tree.
- For coding agents with hooks, Snyk also offers a Snyk Studio installer that makes the agent scan new code automatically.

- Type: Plugin
- Made by: Snyk
- Category: Security
- Formats: Local MCP
- Version: 1.1304.2
- Website: https://docs.snyk.io/agent-security/agentic-security-with-snyk-studio
- Source: https://github.com/snyk/studio-mcp
- Page: https://pluginboard.ai/plugins/snyk-mcp

## Works with

- Claude
- GitHub Copilot
- Cursor
- Claude Code
- Codex
- Antigravity
- Gemini CLI
- OpenClaw
- OpenCode
- Hermes Agent

## Install

### Claude

Add to claude_desktop_config.json:

```json
{
  "mcpServers": {
    "snyk-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "snyk@1.1304.2",
        "mcp",
        "-t",
        "stdio"
      ]
    }
  }
}
```

### GitHub Copilot

Add to VS Code: vscode:mcp/install?%7B%22name%22%3A%22snyk-mcp%22%2C%22command%22%3A%22npx%22%2C%22args%22%3A%5B%22-y%22%2C%22snyk%401.1304.2%22%2C%22mcp%22%2C%22-t%22%2C%22stdio%22%5D%7D

Run in your terminal:

```shell
code --add-mcp '{"name":"snyk-mcp","command":"npx","args":["-y","snyk@1.1304.2","mcp","-t","stdio"]}'
```

Copilot CLI:

```shell
copilot mcp add snyk-mcp -- npx -y snyk@1.1304.2 mcp -t stdio
```

### Cursor

Add to Cursor: cursor://anysphere.cursor-deeplink/mcp/install?name=snyk-mcp&config=eyJjb21tYW5kIjoibnB4IiwiYXJncyI6WyIteSIsInNueWtAMS4xMzA0LjIiLCJtY3AiLCItdCIsInN0ZGlvIl19

Add to .cursor/mcp.json:

```json
{
  "mcpServers": {
    "snyk-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "snyk@1.1304.2",
        "mcp",
        "-t",
        "stdio"
      ]
    }
  }
}
```

### Claude Code

Run in your terminal:

```shell
claude mcp add snyk-mcp -- npx -y snyk@1.1304.2 mcp -t stdio
```

### Codex

Run in your terminal:

```shell
codex mcp add snyk-mcp -- npx -y snyk@1.1304.2 mcp -t stdio
```

### Antigravity

Add to ~/.gemini/config/mcp_config.json:

```json
{
  "mcpServers": {
    "snyk-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "snyk@1.1304.2",
        "mcp",
        "-t",
        "stdio"
      ]
    }
  }
}
```

### Gemini CLI

Run in your terminal:

```shell
gemini mcp add snyk-mcp npx -y snyk@1.1304.2 mcp -t stdio
```

### OpenClaw

In a terminal: Run openclaw mcp add snyk-mcp --command npx, with --arg before each argument (-y snyk@1.1304.2 mcp -t stdio) and --env NAME=value for each variable it needs.

### OpenCode

Run in your terminal:

```shell
opencode mcp add snyk-mcp -- npx -y snyk@1.1304.2 mcp -t stdio
```

### Hermes Agent

Add to ~/.hermes/config.yaml:

```json
{
  "mcp_servers": {
    "snyk-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "snyk@1.1304.2",
        "mcp",
        "-t",
        "stdio"
      ]
    }
  }
}
```

---
From Pluginboard (https://pluginboard.ai).