MCP server · Snyk
Snyk MCP Server (Snyk Studio)
⚠ No independent security audit: entries summarize official sources only. Review permissions and code before installing.
- Type
- MCP server
- Tasks
- Code review
- Compatible agents
- Claude Code, Cursor, Codex, Gemini CLI, GitHub Copilot, Windsurf, Kiro, Cline, Google Antigravity, Amazon Q Developer, Augment, Devin, Goose, Gemini Code Assist (source: Snyk Studio quickstart guides in the official docs (docs.snyk.io, Agent security > Quickstart guides))
- Verdict
- Pick it to have the agent scan the code and dependencies it just wrote before you commit; use the lite profile to save tokens, and only trust folders you mean to scan.
- Permissions
- Runs Snyk scans on local folders you trust: SAST (snyk_code_scan), open-source dependencies (snyk_sca_scan, may run Maven/Gradle etc. to build the dependency tree), containers, IaC, SBOM and AI-BOM, package health; results are sent back to the agent.
- Credentials
- Snyk account; authenticate on first use with the snyk_auth tool (browser sign-in) and trust the project folder with snyk_trust. Node.js/npx or the Snyk CLI installed.
- Maintenance
- Ships inside the Snyk CLI: release v1.1308.3 on 2026-10-23 (npm snyk 1.1308.3); snyk/studio-mcp v1.15.6 on 2026-10-21
- License
- Apache-2.0 (Snyk CLI LICENSE; scans use the Snyk service under your plan)
- Install
- Local only (Snyk offers no hosted remote server). Any client: stdio server `npx -y snyk@latest mcp -t stdio` (optional `--profile=lite`). Claude Code shortcut: `npx -y snyk@latest mcp configure --tool=claude-cli`; hooks-based Snyk Studio installer for Claude Code, Cursor, Codex, Gemini CLI and Copilot (see docs). Official install docs ↗
- Source
- https://github.com/snyk/studio-mcp
- Verified on
- 2026-10-23
Badge for your README
Maintain this project? Show that it's listed here. The badge only says it's listed; it is not a security review or an endorsement.
