Socket MCP Server
Check npm, PyPI and other packages for supply chain risk before you install them.
Officialby SocketHosted or on your computerChecked October 18, 2026
Socket's MCP server lets Claude look up Socket's security, quality, maintenance and license scores for packages from npm, PyPI, cargo, Maven, NuGet, RubyGems, Go modules and more, several at a time. With a Socket organization connected it can also list your alerts, read Socket's threat feed and inspect the files inside a published package.
Who it is for
- Developers who let AI add dependencies
- Open source maintainers
- Security teams watching supply chain risk
Prompts to try
Once it is connected, ask in plain words. Claude decides when to use the server and asks before it changes anything important.
Check the security score of every dependency in this package.json and flag anything risky.Is version 4.18.2 of express safe to use? Show me its scores.Show the critical open alerts for our Socket organization.How to connect it
In Claude Code
claude mcp add --transport http socket-mcp https://mcp.socket.dev/
In the Claude desktop app
Customize > Connectors > + Add > Add custom connector, URL: https://mcp.socket.dev/
Hosted address: https://mcp.socket.dev/
Good to know
The hosted server asks you to sign in to Socket on first use. The local server (npm @socketsecurity/mcp) needs a SOCKET_API_TOKEN instead.
Unlock the setup steps
Free. Leave your email once to open the setup steps for all 150 servers, and get the best new connectors each month.
How we checked it
Checked the SocketDev/socket-mcp repo (MIT, last commit 2026-10, release 0.2.1) with its service reference and the @socketsecurity/mcp npm package; the hosted endpoint at mcp.socket.dev answers the MCP handshake.
Source: github.com/SocketDev/socket-mcp