Best Dependabot MCP Servers
Dependabot is a GitHub service that automates dependency updates in software projects by creating pull requests when new versions of dependencies are available, helping developers keep their projects secure and up-to-date.
Why this server?
Surfaces security alerts and CVE warnings by integrating with Dependabot and the GitHub Advisory Database.
AsecurityAlicense-qualityProvides crowdsourced package intelligence and security alerts for AI coding assistants by analyzing project dependencies and framework co-occurrence. It enables automated project scans, package alternative discovery, and data-driven recommendations across multiple programming ecosystems.Last updated 2 months ago101MITWhy this server?
Integrates with Dependabot for automated dependency updates
AsecurityAlicense-qualityFacilitates unified execution and result parsing for various testing frameworks, including Bats, Pytest, Flutter, Jest, and Go, through a Model Context Protocol interface.Last updated 5 months ago115MITWhy this server?
Provides automated triage for Dependabot alerts and pull requests as part of a headless workflow for maintaining open-source repositories.
AsecurityAlicense-qualityOpen source contribution manager — tracks PRs across repos, discovers contributable issues, diagnoses CI failures, and drafts maintainer responses. 21 MCP tools, 5 resources, 3 prompts. Ships as CLI, MCP server, and Claude Code plugin.Last updated 2 days ago208MITWhy this server?
Allows for the monitoring and management of security alerts, specifically providing tools to list, summarize, and dismiss Dependabot and code scanning alerts.
-securityAlicense-qualityAn autonomous GitHub management engine that enables control over repositories, branches, security alerts, and Actions workflows through natural language. It utilizes a zero-local-footprint architecture by storing all configuration and audit logs within a private state repository on GitHub.Last updated 15 days ago1MITWhy this server?
Enables querying of Dependabot alerts for GitHub repositories, providing visibility into dependency vulnerabilities
AsecurityFlicense-qualityThis server integrates with GitHub Advanced Security to load security alerts and bring it into your context. Supports Dependabot Security Alerts, Secret Scanning Alerts, Code Security AlertsLast updated a year ago325Why this server?
Allows for the analysis of compliance policy failures and alerts generated by Dependabot.
-securityFlicense-qualityEnables AI assistants to query software supply chain compliance data, including asset status, security vulnerabilities, and evidence lineage. It allows for natural language analysis of compliance posture, policy violations, and deployment blockers across an organization.Last updated 2 months agoWhy this server?
Manages Dependabot security and dependency updates as part of the GitHub Security Suite, enabling automated vulnerability detection and dependency management.
-securityFlicense-qualityEnables comprehensive GitHub workflow automation including Actions monitoring, PR management, code search, file operations, and repository management through a code-first architecture that reduces token usage by 98%.Last updated 3 months ago4