Best Snyk MCP Servers
Snyk is a developer security platform that helps developers build software securely, providing tools to find, fix, and monitor vulnerabilities in code, dependencies, containers, and infrastructure as code.
Why this server?
Detects and redacts Snyk API tokens in text.
AlicenseAqualityBmaintenanceEnables AI agents to scan text for leaked secrets and prompt injection markers, and redact them before reaching an LLM.21MITWhy this server?
Allows ingesting Snyk SARIF scanner findings and proving which findings are reachable.
AlicenseAqualityBmaintenanceOfficial Codna MCP server with Mojo-powered risk simulation. Maps repos with zero LLM tokens. 5 stdio tools: triage, root-cause analysis and fix plans (optional PRs), SARIF reachability proof, on-device code memory and bug reporting. Introspection needs no credentials; execution requires a one-time free codna login. Source: cli/codna/mcp_server.py. Registry: io.github.thyn-ai/codna.5538 PyPIApache 2.0Why this server?
Provides complementary AI-specific security scanning that understands AI agent vulnerabilities not covered by traditional code scanners like Snyk.
Why this server?
Allows to interact with Snyk API & Web to onboard scan targets, configure authentication, run DAST scans, and triage findings.

Snyk API & Web MCP Serverofficial
AlicenseCqualityAmaintenanceConnects AI coding assistants to Snyk API & Web for onboarding scan targets, configuring authentication, running DAST scans, and triaging findings through natural language.5144 PyPI8Apache 2.0Why this server?
Enables AI agents to trigger security scans for code, open-source dependencies, infrastructure as code (IaC), and container images, as well as retrieve findings, manage SBOM files, and handle Snyk authentication.

Snyk Studio MCPofficial
AlicenseNot gradedqualityAmaintenanceAn MCP server that enables easy integration with coding assistants, providing security context to AI agents. This runs locally using the Snyk CLI.55Apache 2.0Why this server?
Provides tools for listing Snyk projects, querying security issues by severity, filtering by project or scope (Frontend/Backend), and obtaining normalized issue data with CVEs, dependencies, and fix information.
AlicenseDqualityDmaintenanceIntegrates Snyk security scanning with MCP clients like Claude Code, enabling listing of projects, querying issues by severity, and filtering by project or scope.3MITWhy this server?
Provides security vulnerability scanning and monitoring through Snyk.
AlicenseNot gradedqualityAmaintenanceProvides a central gateway to 170+ offline mock MCP servers with deterministic fixture-based responses and per-server SQLite state, enabling realistic credential-free agent trajectory testing and multi-step workflow rehearsal.MITWhy this server?
Provides superior supply chain security compared to Snyk Agent Scan by offering npm package integrity verification specifically for MCP servers.
AlicenseNot gradedqualityCmaintenanceMCP servers are installed via npx -y @scope/package — which silently downloads the latest version every time your AI tool starts, with no integrity check. mcp-lock fixes this by recording exact tarball hashes on first run and detecting any changes on every run after that — the same guarantee npm ci gives you for Node.js projects.8 npmMITWhy this server?
Scans for prompt injection, tool shadowing, toxic data flows, and hardcoded secrets.
AlicenseNot gradedqualityAmaintenanceA proxy server that wraps any MCP server, adding behavioral profiling, security scanning, risk gating, and safe execution to its tools.651 PyPI8Apache 2.0