Snyk API & Web MCP Server — Claude Code MCP server
Connects Claude Code to Snyk API & Web for target setup, DAST checks, and vulnerability triage.
claude mcp add saw-mcp -e MCP_SAW_API_KEY=<MCP_SAW_API_KEY> -- uvx snyk-apiweb-mcpWhat Snyk API & Web MCP Server does
This MCP server links an AI coding assistant with Snyk API & Web. It can onboard API and web targets, set up authentication details, start DAST checks, and help review the resulting findings. The server is built with FastMCP 2.0.
You need Python 3.10+ and a Snyk API & Web API key. Login-based web targets also need browser automation through playwright-cli with Chromium, or a separate Playwright MCP server. The API connection depends on MCP_SAW_API_KEY being available.
The key can come from an environment variable, .env, or config/config.yaml; uvx installs normally use the environment variable. In Claude Code, register the server with claude mcp add, then ask the assistant to configure targets or inspect scan results.
What it helps with
- onboard an API from an OpenAPI schema
- connect a web app that requires login
- start a DAST check for a target
- review and triage vulnerability findings
- pass Snyk access through an API key
Example prompts for the agent
- Set up a Snyk API & Web target from this OpenAPI schema.
- Prepare this authenticated web application for a security check.
- Run a DAST scan for the target and sort the findings by issue.
How to install Snyk API & Web MCP Server
Platform CLI
claude mcp add saw-mcp -e MCP_SAW_API_KEY=<MCP_SAW_API_KEY> -- uvx snyk-apiweb-mcpReplace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from snyk-apiweb-mcp <command>
Platform CLI
codex mcp add snyk-api-web-mcp-server --env MCP_SAW_API_KEY=<MCP_SAW_API_KEY> -- uvx snyk-apiweb-mcpReplace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from snyk-apiweb-mcp <command>
Config file
{
"mcpServers": {
"snyk-api-web-mcp-server": {
"command": "uvx",
"args": [
"snyk-apiweb-mcp"
],
"env": {
"MCP_SAW_API_KEY": "<MCP_SAW_API_KEY>"
}
}
}
}Replace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from snyk-apiweb-mcp <command>
Config file
{
"servers": {
"snyk-api-web-mcp-server": {
"type": "stdio",
"command": "uvx",
"args": [
"snyk-apiweb-mcp"
],
"env": {
"MCP_SAW_API_KEY": "<MCP_SAW_API_KEY>"
}
}
}
}Replace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from snyk-apiweb-mcp <command>
Platform CLI
gemini mcp add -e MCP_SAW_API_KEY=<MCP_SAW_API_KEY> snyk-api-web-mcp-server uvx snyk-apiweb-mcpReplace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from snyk-apiweb-mcp <command>
Step by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about Snyk API & Web MCP Server
How do I install Snyk API & Web MCP Server in Claude Code?
Run claude mcp add saw-mcp -e MCP_SAW_API_KEY=<MCP_SAW_API_KEY> -- uvx snyk-apiweb-mcp. Provide the Snyk API & Web key through MCP_SAW_API_KEY.
What does Snyk API & Web MCP Server do?
It gives an AI coding assistant access to Snyk API & Web for onboarding API and web targets, handling authentication setup, launching DAST checks, and reviewing findings.
What is required for web targets with login flows?
You need Python 3.10+, an API key, and browser automation. Use playwright-cli with Chromium, or connect Playwright MCP as a separate MCP server.
