A
licenseA
qualityA
maintenanceDependency intelligence for AI agents. CVE scanning, health checks, upgrade planning.
9
112 npm
2
Apache 2.0
dependency-management-mcp-server
by com.sonatype
Server Details
Sonatype component intelligence: versions, security analysis, and Trust Score recommendations
Glama couldn't complete the latest health check. If this server requires authentication, missing or expired test credentials may be the cause. A test profile lets Glama authenticate for health checks and discover tools; it is separate from your personal connections.
If you are the author, claim ownership, then add or update a test profile under Admin → Test Profile.
- Status
- Unhealthy
- Uptime
- 68.0% over 38 days
- Last Tested
- Transport
- Streamable HTTP
- URL
- Repository
- sonatype/dependency-management-mcp-server
- GitHub Stars
- 68
TDQS
A3.9/5.0
Scored across 3 tools
Disambiguation4/5
Each tool targets a distinct query: current version details, latest version, and ranked recommendations. There is some conceptual overlap between 'getComponentVersion' and 'getLatestComponentVersion', but the descriptions clarify the difference (specific version vs. latest available).
Naming Consistency5/5
All three tools follow a consistent camelCase 'get[Adjective]ComponentVersion' pattern (getComponentVersion, getLatestComponentVersion, getRecommendedComponentVersions). The naming is predictable and easy to infer.
Tool Count3/5
Three tools is on the thin side for a dependency management server; there is no tool for listing dependencies, adding/updating, or removing them. However, the server appears narrowly scoped to version analysis, so the count is borderline but not unreasonable.
Completeness3/5
The toolset covers version retrieval and recommendations but lacks essential lifecycle operations such as listing all dependencies in a project, adding/updating a dependency, or resolving transitive trees. Agents would hit dead ends for common dependency management workflows.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
3 tool updates
- Changed
getComponentVersion1 field changed- added
Input schema / $schemaAdded value: +"https://json-schema.org/draft/2020-12/schema"
- Changed
getLatestComponentVersion1 field changed- added
Input schema / $schemaAdded value: +"https://json-schema.org/draft/2020-12/schema"
- Changed
getRecommendedComponentVersions1 field changed- added
Input schema / $schemaAdded value: +"https://json-schema.org/draft/2020-12/schema"
3 tool updates
- First observed
getComponentVersion - First observed
getLatestComponentVersion - First observed
getRecommendedComponentVersions
Related MCP Connectors
Trust-check any dependency for agents: OpenSSF Scorecard, licenses, CVEs, deps. 7 ecosystems.
Supply chain risk scoring for npm, PyPI, Cargo, and Go. 9 tools. Behavioral signals.
Generate SBOMs, scan vulnerabilities, and analyze dependencies from local projects or Git repos.
Provide AI-powered real-time analysis and intelligence on NPM packages, including security, depend…
Related MCP Servers
- AlicenseNot gradedqualityAmaintenanceEnables users to look up package versions, scan for vulnerabilities, and analyze dependencies across multiple registries (npm, Maven, PyPI, etc.) using exact version recommendations for security.4MIT
- AlicenseAqualityDmaintenanceSupply chain risk scoring for npm, PyPI, and GitHub repos857 npm7MIT
- AlicenseNot gradedqualityBmaintenanceEnables safety-ranked discovery of open-source components across npm, PyPI, crates.io, RubyGems, GitHub, and Hugging Face, with license, security, and health checks.1,348 npmMIT
Try in Browser
One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd
Glama MCP Gateway
Add one secure layer between your agents and this server.