Best Snyk MCP Servers
Snyk is a developer security platform that helps developers build software securely, providing tools to find, fix, and monitor vulnerabilities in code, dependencies, containers, and infrastructure as code.
Why this server?
Detects and redacts Snyk API tokens in text.
AlicenseAqualityBmaintenanceEnables AI agents to scan text for leaked secrets and prompt injection markers, and redact them before reaching an LLM.21MITWhy this server?
Allows to interact with Snyk API & Web to onboard scan targets, configure authentication, run DAST scans, and triage findings.

Snyk API & Web MCP Serverofficial
AlicenseCqualityAmaintenanceConnects AI coding assistants to Snyk API & Web for onboarding scan targets, configuring authentication, running DAST scans, and triaging findings through natural language.518Apache 2.0Why this server?
Provides complementary AI-specific security scanning that understands AI agent vulnerabilities not covered by traditional code scanners like Snyk.
Why this server?
Allows ingesting Snyk SARIF scanner findings and proving which findings are reachable.

io.github.thyn-ai/codnaofficial
AlicenseNot gradedqualityCmaintenanceProvides MCP tools for repository triage, reachability analysis of security scanner findings, offline code recall, root-cause fix planning, and bug reporting.Apache 2.0Why this server?
Enables AI agents to trigger security scans for code, open-source dependencies, infrastructure as code (IaC), and container images, as well as retrieve findings, manage SBOM files, and handle Snyk authentication.

Snyk Studio MCPofficial
AlicenseNot gradedqualityAmaintenanceAn MCP server that enables easy integration with coding assistants, providing security context to AI agents. This runs locally using the Snyk CLI.55Apache 2.0Why this server?
Provides tools for listing Snyk projects, querying security issues by severity, filtering by project or scope (Frontend/Backend), and obtaining normalized issue data with CVEs, dependencies, and fix information.
AlicenseDqualityDmaintenanceIntegrates Snyk security scanning with MCP clients like Claude Code, enabling listing of projects, querying issues by severity, and filtering by project or scope.3MITWhy this server?
Check Snyk's status page for current health and incidents.
AlicenseNot gradedqualityAmaintenanceChecks vendor status pages, inspects SSL/TLS certificates, verifies DNS propagation, and provides incident-response playbooks. Includes 7 tools for DevOps health monitoring.116 npm2Apache 2.0Why this server?
Provides comprehensive security scanning and vulnerability management through both Snyk CLI tools (test, code analysis, container scanning, IaC scanning, SBOM generation) and REST API tools for querying projects, issues, and security findings across organizations.
AlicenseNot gradedqualityFmaintenanceProvides security scanning capabilities through Snyk CLI tools and REST API, enabling AI assistants to test projects for vulnerabilities, retrieve security issues, and manage Snyk projects with comprehensive SAST, container, and infrastructure as code scanning.2MITWhy this server?
Scans for prompt injection, tool shadowing, toxic data flows, and hardcoded secrets.
AlicenseNot gradedqualityAmaintenanceA proxy server that wraps any MCP server, adding behavioral profiling, security scanning, risk gating, and safe execution to its tools.140 PyPI8Apache 2.0