# Snyk (MCP Server)

> Run Snyk code, dependency, IaC and container scans from your agent

- Type: MCP server
- Publisher: Snyk (official)
- Categories: Security, Development
- Website: https://docs.snyk.io/
- Transport: stdio
- Launch command: npx -y snyk@latest mcp -t stdio
- Sign-in: oauth
- Listed: 2025-05-01

## About

Snyk's MCP server, built into the Snyk CLI, lets AI agents run Snyk security scans on code, open-source dependencies, infrastructure as code, containers and SBOMs. It also provides package health checks and AI-BOM generation. Authentication is handled through the Snyk CLI auth flow.

## Install

1. **Add the server to Codex**

   Codex CLI:

   ```bash
   codex mcp add snyk -- npx -y snyk@latest mcp -t stdio
   ```

   config.toml:

   ```toml
   [mcp_servers.snyk]
   command = "npx"
   args = ["-y", "snyk@latest", "mcp", "-t", "stdio"]
   ```

   Agents SDK:

   ```python
   from agents import Agent, Runner
   from agents.mcp import MCPServerStdio
   
   async with MCPServerStdio(
       name="Snyk",
       params={"command": "npx", "args": ["-y", "snyk@latest", "mcp", "-t", "stdio"]},
   ) as server:
       agent = Agent(name="Assistant", mcp_servers=[server])
       result = await Runner.run(agent, "Scan this project's dependencies for vulnerabilities")
       print(result.final_output)
   ```

## Tools

- `snyk_sca_scan`
- `snyk_code_scan`
- `snyk_iac_scan`
- `snyk_container_scan`
- `snyk_sbom_scan`
- `snyk_aibom`
- `snyk_package_health_check`
- `snyk_trust`
- `snyk_auth`
- `snyk_logout`
- `snyk_version`

## Example prompts

- "Scan this project's dependencies for vulnerabilities"
- "Run a Snyk Code scan on the files I just changed"
- "Check my Terraform for misconfigurations"
- "Is the package lodash healthy to use?"

## Related

- [Chrome DevTools MCP](https://chatgptplugins.directory/mcp/chrome-devtools.md): Let coding agents control and debug a live Chrome browser
- [Playwright MCP](https://chatgptplugins.directory/mcp/playwright.md): Browser automation for agents via Playwright accessibility snapshots
- [GitHub](https://chatgptplugins.directory/mcp/github.md): Manage repos, issues, pull requests and Actions from your AI agent
- [Context7](https://chatgptplugins.directory/mcp/context7.md): Pull up-to-date, version-specific library docs into your coding agent
- [Supabase](https://chatgptplugins.directory/mcp/supabase.md): Manage Supabase databases, migrations, edge functions and logs
- [Stripe](https://chatgptplugins.directory/mcp/stripe.md): Query and act on your Stripe account and search Stripe docs from any agent

---
Source: https://chatgptplugins.directory/mcp/snyk · Index: https://chatgptplugins.directory/llms.txt · Independent and community-run. Not affiliated with or endorsed by OpenAI. ChatGPT is a trademark of OpenAI.