Snyk MCP Server

Official Snyk MCP server that brings developer security scanning into AI agent workflows. Lets agents scan code, open-source dependencies, containers, and infrastructure-as-code for vulnerabilities, retrieve fix advice, and check license issues directly from the editor or CI, using the Snyk CLI under the hood.

{
  "mcpServers": {
    "snyk": {
      "command": "npx",
      "args": [
        "-y",
        "snyk",
        "mcp",
        "-t",
        "stdio"
      ],
      "env": {
        "SNYK_TOKEN": "<YOUR_SNYK_TOKEN>"
      }
    }
  }
}

{
  "type": "object",
  "required": [
    "path"
  ],
  "properties": {
    "path": {
      "type": "string",
      "description": "Path to the code directory to scan"
    }
  }
}

{
  "type": "object",
  "required": [
    "path"
  ],
  "properties": {
    "path": {
      "type": "string",
      "description": "Path to the project manifest or directory"
    }
  }
}

{
  "type": "object",
  "required": [
    "image"
  ],
  "properties": {
    "image": {
      "type": "string",
      "description": "Container image name and tag"
    }
  }
}