Best Snyk MCP Servers
Snyk is a developer security platform that helps developers build software securely, providing tools to find, fix, and monitor vulnerabilities in code, dependencies, containers, and infrastructure as code.
Why this server?
Detects and redacts Snyk API tokens in text.
AlicenseAqualityBmaintenanceEnables AI agents to scan text for leaked secrets and prompt injection markers, and redact them before reaching an LLM.21MITWhy this server?
Allows ingesting Snyk SARIF scanner findings and proving which findings are reachable.
AlicenseAqualityBmaintenanceOfficial Codna MCP server with Mojo-powered risk simulation. Maps repos with zero LLM tokens. 5 stdio tools: triage, root-cause analysis and fix plans (optional PRs), SARIF reachability proof, on-device code memory and bug reporting. Introspection needs no credentials; execution requires a one-time free codna login. Source: cli/codna/mcp_server.py. Registry: io.github.thyn-ai/codna.5273 PyPIApache 2.0Why this server?
Provides complementary AI-specific security scanning that understands AI agent vulnerabilities not covered by traditional code scanners like Snyk.
Why this server?
Allows to interact with Snyk API & Web to onboard scan targets, configure authentication, run DAST scans, and triage findings.

Snyk API & Web MCP Serverofficial
AlicenseCqualityAmaintenanceConnects AI coding assistants to Snyk API & Web for onboarding scan targets, configuring authentication, running DAST scans, and triaging findings through natural language.5139 PyPI8Apache 2.0Why this server?
Enables AI agents to trigger security scans for code, open-source dependencies, infrastructure as code (IaC), and container images, as well as retrieve findings, manage SBOM files, and handle Snyk authentication.

Snyk Studio MCPofficial
AlicenseNot gradedqualityBmaintenanceAn MCP server that enables easy integration with coding assistants, providing security context to AI agents. This runs locally using the Snyk CLI.58Apache 2.0Why this server?
Provides tools for listing Snyk projects, querying security issues by severity, filtering by project or scope (Frontend/Backend), and obtaining normalized issue data with CVEs, dependencies, and fix information.
AlicenseDqualityDmaintenanceIntegrates Snyk security scanning with MCP clients like Claude Code, enabling listing of projects, querying issues by severity, and filtering by project or scope.3MITWhy this server?
Provides live status and incident information for Snyk, enabling agents to check for outages and degraded performance.
AlicenseNot gradedqualityBmaintenanceEnables AI agents to check the live operational status of hundreds of cloud, SaaS and AI providers, returning current state, affected components and active incidents for a named stack so agents can tell a vendor outage apart from their own broken code. It answers from a continuously polled local database, so agents can query stacks, list degraded providers, and review incident history without calling vendor status pages.111 npmMITWhy this server?
Integrates security vulnerability scanning into the isolated verification pipeline for submission gating.
AlicenseNot gradedqualityFmaintenanceArcAgent MCP server for bounty discovery, workspace execution, and verified coding submissions2Elastic 2.0Why this server?
Provides dependency vulnerability scanning to detect and manage security risks within project libraries.
AlicenseNot gradedqualityDmaintenanceAn orchestrator that coordinates multiple security and quality tools like Semgrep and ESLint to provide comprehensive code analysis and scoring. It enables users to perform vulnerability scanning, architecture metrics, and impact analysis through CLI, REST, or MCP interfaces.1MIT