Snyk MCP Server: Tools, Setup and Security

The Snyk MCP server lets an AI coding agent run Snyk security scans on your code, open-source dependencies, containers, infrastructure as code (IaC) and SBOMs. Snyk publishes it as part of the Snyk CLI and positions it as one layer of Snyk Studio, its toolkit for securing AI-written code.

Checked against: Getting started with Snyk Studio on 28 October 2026. eSEOspace did not install or test this server.

At a glance

What it can do

Snyk's Snyk Studio overview lists these MCP tools:

• snyk_sca_scan: Open Source dependency scan
• snyk_code_scan: code scan
• snyk_iac_scan: IaC scan
• snyk_container_scan: container scan
• snyk_sbom_scan: SBOM file scan
• snyk_aibom: create an AI-BOM
• snyk_package_health_check: evaluate package health when picking a dependency
• snyk_trust: trust a folder before scanning
• snyk_auth, snyk_logout, snyk_version and snyk_send_feedback

Profiles decide which tools load:

How to connect it

Snyk Studio has two install paths. For Claude Code, Cursor, Codex CLI, Gemini CLI and GitHub Copilot, Snyk recommends an installer script that uses hooks. For other agents, you add the MCP server to the client's config:

{
  "mcpServers": {
    "Snyk": {
      "command": "npx",
      "args": ["-y", "snyk@latest", "mcp", "-t", "stdio"],
      "env": {}
    }
  }
}

To choose a profile, use the flag or the SNYK_MCP_PROFILE environment variable:

npx -y snyk@latest mcp -t stdio --profile=lite

Snyk suggests a test prompt such as "scan my directory for security issues." It also publishes quickstart guides for clients including Cline, Continue, Devin, Kiro, Qodo, Goose and JetBrains AI Assistant.

Security notes

• Local execution. The server runs on your machine with access to local files. That is the point, but it also means the agent works with your file permissions.
• Build tools run. Snyk notes that snyk_sca_scan "can execute third-party ecosystem tools (for example, Gradle or Maven)" to build the dependency tree. Keep that in mind before scanning projects you do not trust.
• Folder trust. snyk_trust exists so a folder is trusted before scanning. Do not let an agent trust folders you have not reviewed.
• Installer scripts. The hooks installer pulls a script from GitHub and can install uv, Python, Node.js, npm and the Snyk CLI. Snyk says it prompts before each step, and offers a build-from-source option for audits.

The MCP project's security best practices also cover risks such as token passthrough, confused deputy attacks and scope minimization.

Pair scanning with a review of the servers themselves. See command injection in local MCP servers and how to security-review an MCP server, plus the MCP Security Center.

Alternatives

• SonarQube MCP server for code quality, issues and quality gates alongside security.
• GitHub MCP Server, whose code_security and dependabot toolsets read GitHub's own alerts.
• GitLab MCP server, which offers vulnerability tools on Ultimate.

Next step

Start with the Lite profile so the agent scans each change without loading every tool. Our MCP security checklist covers what else to check, and the MCP server directory lists other developer tools.

Frequently asked questions