Name: Snyk MCP Server
Author: Snyk

Snyk builds its MCP server into the Snyk CLI, started with snyk mcp, so Claude can run Snyk's code, open source, container, infrastructure as code and secrets scans and work through the results in the conversation. Snyk Studio's installer can also add instructions to your global CLAUDE.md that tell Claude to scan new code and fix issues before it finishes a task.

Who it is for

Developers using AI coding assistants
Security teams rolling out secure AI coding
DevOps engineers scanning containers and Terraform

Prompts to try

Once it is connected, ask in plain words. Claude decides when to use the server and asks before it changes anything important.

Prompt 1

Run a Snyk code scan on this project and fix the high-severity issues.

Prompt 2

Check our package.json dependencies for known vulnerabilities and suggest safe upgrade versions.

Prompt 3

Scan the Terraform files in the infra folder for misconfigurations.

How to connect it

In Claude Code

$claude mcp add --transport stdio snyk -- npx -y snyk@latest mcp -t stdio

In the Claude desktop app

Add this to claude_desktop_config.json, then restart the app:

json

{
  "mcpServers": {
    "Snyk": {
      "command": "npx",
      "args": [
        "-y",
        "snyk@latest",
        "mcp",
        "-t",
        "stdio"
      ]
    }
  }
}

Good to know

Snyk's own installer (npx -y snyk@latest mcp configure --tool=claude-cli) also writes scan rules into your global CLAUDE.md. Sign in through the snyk_auth tool.

Unlock the setup steps

Free. Leave your email once to open the setup steps for all 150 servers, and get the best new connectors each month.

How we checked it

Checked Snyk's Claude Code guide and Snyk Studio docs, the snyk/studio-mcp repo (Apache-2.0, release 1.15.5 in 2026-09), the snyk npm package that ships it (1.1308.1, 2026-10) and the registry entry (io.snyk/mcp).

Source: docs.snyk.io/agent-security/agentic-security-with-snyk-studio/quickstart-guides/claude-code-guide

Snyk MCP Server