Scan any library with Snyk to identify vulnerabilities, license issues, and get remediation advice across multiple ecosystems.
MIT
650,527 tools. Updated 2026-10-14 04:26
"Snyk" matching MCP tools:
- Set up continuous monitoring for a project using Snyk. Provide the project path to start tracking vulnerabilities.MIT
- Scan project dependencies with Snyk to generate a comprehensive security report for all dependencies.MIT
- Import JSON security scan results from Trivy, Semgrep, npm-audit, pip-audit, Snyk, or CodeQL and normalize them into Delimit ledger findings to block deploys on unresolved criticals.MIT
- Prove which scanner findings are exploitable and production-reachable by classifying SARIF 2.1.0 reports from CodeQL, Semgrep, Snyk, or Trivy.Apache 2.0
- Imports a Postman collection to create an API target for security scanning. Accepts collection URL or JSON and allows duplicate target creation.Apache 2.0
Matching MCP Servers
- AlicenseDqualityDmaintenanceIntegrates Snyk security scanning with MCP clients like Claude Code, enabling listing of projects, querying issues by severity, and filtering by project or scope.3MIT
Snyk Studio MCPofficial
AlicenseNot gradedqualityAmaintenanceAn MCP server that enables easy integration with coding assistants, providing security context to AI agents. This runs locally using the Snyk CLI.55Apache 2.0
- Fetch full vulnerability details including CVSS scores, CWEs, EPSS, KEV flag, and references by providing a vulnerability ID and optional source.MIT
- Deduplicate vulnerability findings by grouping those linked through aliases into clusters, each with a canonical ID and merge trace.MIT
- Check a package version for known vulnerabilities via OSV.dev and automatically fetch the fixed version's README, showing exactly what upgrading resolves.MIT
- Create a login sequence for a target, configuring credentials via custom field mappings. After creation, enable it on the target to activate authentication.Apache 2.0
- Automates logout detection setup for web scans, enabling the scanner to identify when re-authentication is needed by configuring session check URLs and logout detectors, with auto-detection from the login sequence.Apache 2.0
- Analyze AI agent skills for security risks including prompt injection, malicious code, and credential handling using static analysis across 8 risk categories. Returns risk scores and detailed findings.MIT
- Retrieve detailed documentation for a clearskies extension module, including installation status, version, and all discovered components with their descriptions and parameters.MIT
- Create a web target to onboard for DAST scanning by providing name and URL. Optionally assign labels, a scanning agent, or allow duplicates. The returned target ID is used for authentication and scan management.Apache 2.0
- Send custom requests to the Probely API for endpoints not covered by dedicated tools. Use with saved credentials.Apache 2.0
- Set up TOTP-based two-factor authentication for a target by generating a TOTP code and configuring it as the OTP placeholder for the login sequence. Call this before creating or updating the login sequence to ensure proper OTP handling.Apache 2.0
- Get usage examples and integration guidance for any clearskies extension module by providing its name.MIT
- Configure form-based login authentication for web scan targets. Use when Playwright-based login recording is not available.Apache 2.0
- Retrieve a credential by its ID to get its URI for referencing in authentication configurations.Apache 2.0
- Ingest external SARIF files to merge security findings into a normalized pipeline for deduplication, baselining, and dashboarding.MIT
- List all credentials for authentication configuration, returning URIs to use in basic_auth, headers, etc. Sensitive values are not exposed.Apache 2.0