Snyk (npx) MCP Server
CommunityContributed by Snyk
Official Snyk MCP server, shipped inside the Snyk CLI. Scans code, open-source dependencies, containers, and IaC for vulnerabilities directly from your AI agent, surfacing security issues and fix guidance during development.
About the Snyk (npx) MCP Server
The Snyk (npx) MCP server is a local (stdio) Model Context Protocol server available in the McpMux registry. Official Snyk MCP server, shipped inside the Snyk CLI. Scans code, open-source dependencies, containers, and IaC for vulnerabilities directly from your AI agent, surfacing security issues and fix guidance during development. This is a community-contributed MCP server by Snyk.
Install the Snyk (npx) MCP server with one click using McpMux. It works with Cursor, Claude Desktop, Claude Code, VS Code, ChatGPT, Windsurf, JetBrains, and any MCP-compatible AI client. This server requires an API key — McpMux securely stores your credentials with AES-256-GCM encryption.
Transport Configuration
{
"type": "stdio",
"command": "npx",
"args": [
"-y",
"snyk",
"mcp",
"-t",
"stdio",
"--experimental"
],
"env": {
"SNYK_TOKEN": "${input:SNYK_TOKEN}"
},
"metadata": {
"inputs": [
{
"id": "SNYK_TOKEN",
"label": "Snyk API Token",
"description": "Snyk account API token used to authenticate the CLI. Find it in your Snyk Account Settings under 'API Token'. Alternatively you can authenticate the CLI interactively with 'snyk auth'.",
"type": "text",
"required": true,
"secret": true,
"placeholder": "********-****-****-****-************",
"obtain": {
"url": "https://app.snyk.io/account",
"instructions": "1. Sign in to Snyk at https://app.snyk.io\n2. Click your name (top right) and choose 'Account Settings'\n3. Under 'API Token', click 'Show' (or 'Click to show')\n4. Copy the token value",
"button_label": "Get API Token"
}
}
]
}
}Categories
Tags
Supported AI Clients
The Snyk (npx) MCP server works with all MCP-compatible AI clients through McpMux:
Related MCP Servers
1Password (npx)
Access secrets from 1Password vaults. List vaults, retrieve items, and search for credentials using a service account token.
Aikido Security (npx)
Scan code and secrets with Aikido Security directly from your AI coding agent. Exposes Aikido's Code and Secrets Scan as an MCP tool returning machine-readable findings you can triage, fix, or ignore.
Auth0 (npx)
Manage your Auth0 tenant through natural language: applications, APIs (resource servers), actions, forms, and logs via the Auth0 Management API. Authentication uses an OAuth 2.0 device-authorization browser flow handled by the server; tokens are stored in your OS keychain.
Bitwarden (npx)
Securely access your Bitwarden vault and administer your organization through the Bitwarden CLI and Public API. Manage vault items, folders, collections, Sends, and password generation, plus organization members, groups, policies, and audit logs.
Codacy (npx)
Connect to Codacy to analyze code quality and security, run static analysis (SAST, secrets, dependency, and IaC scans), browse repositories, list issues, and surface coverage data from your Codacy account via npx.
DB Query Guard MCP
Governed database query review, SQL simulation, approvals, and audits as a paid remote MCP.
Install Snyk (npx) with McpMux
One-click install from the McpMux desktop app. Auto-configures for Cursor, Claude, VS Code, ChatGPT, Windsurf, JetBrains, and any MCP-compatible client.