mcp · snyk — Claude Code MCP server: scans code
This MCP server brings Snyk checks into an AI coding tool. Use it to inspect code, dependencies, IaC, containers, SBOM files, and secrets.
claude mcp add mcp -- npx -y snykWhat mcp does
The server lets an MCP client start Snyk checks in the current project context and read the resulting security findings. Its available tools cover source code, open-source dependencies, IaC configuration, containers, SBOM files, and secret detection. Other tools can create an AIBOM, assess package health, or trust a folder before a scan.
Authentication, logout, status, and version actions are included as well. The connection uses the Snyk CLI through snyk mcp; the client starts it with npx -y snyk.
A dependency scan may run ecosystem tools such as Gradle or Maven locally to build the project dependency tree. Check that part of the environment before starting snyk_sca_scan.
What it helps with
- find flaws in application code
- check project dependencies
- scan IaC files and containers
- detect secrets in a repository
- create an AIBOM for a project
Example prompts for the agent
- Scan this project’s dependencies and show the security findings.
- Inspect the source code and IaC configuration in the current project.
- Check the container and look for exposed secrets.
How to install mcp
Platform CLI
claude mcp add mcp -- npx -y snykPlatform CLI
codex mcp add snyk-mcp -- npx -y snykConfig file
{
"mcpServers": {
"snyk-mcp": {
"command": "npx",
"args": [
"-y",
"snyk"
]
}
}
}Config file
{
"servers": {
"snyk-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"snyk"
]
}
}
}Platform CLI
gemini mcp add snyk-mcp npx -y snykStep by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about mcp
How do I install mcp in Claude Code?
Run claude mcp add mcp -- npx -y snyk.
What does mcp do?
It connects Snyk security checks to an MCP-enabled tool and returns findings from scans of code, dependencies, IaC, containers, SBOM files, and secrets.
What can happen during a dependency scan?
snyk_sca_scan can run tools such as Gradle or Maven on your machine to obtain the project dependency tree.
Similar MCP servers
Everything for Security →mcp by other authors comes first.
