
Snyk API & Web MCP Server
Connects your AI assistant to Snyk API & Web (formerly Probely) for running DAST scans and triaging vulnerabilities through natural language. You can onboard API targets from OpenAPI specs or Postman collections, configure authentication for web apps, kick off scans, and manage findings without touching the web console. Built on FastMCP 2.0 with tools prefixed `probely_*` for backward compatibility. Requires a scoped API key from the Snyk API & Web platform. Reach for this when you want security testing integrated into your coding workflow, whether you're spinning up new targets or investigating scan results alongside your code.
- GitHub stars
- 7
- tool
- 1
- auth
- Secret needed
- transport
- STDIO
- env var
- 1
- last updated
- Apr 27, 2026
Tools
1 toolsPublic tool metadata for what this MCP can expose to an agent.
probely_configure_form_loginSimple single-page login only; no multi-step flows or 2FA.
Simple single-page login only; no multi-step flows or 2FA.
No parameter schema in public metadata yet.
Sponsors
Configuration
MCP_SAW_API_KEY*secretSnyk API & Web API key. Create at https://plus.probely.app/api-keys
Readme
SAW MCP Banner
Snyk API & Web MCP Server
Connect your AI coding assistant to Snyk API & Web so it can onboard scan targets, configure authentication, run DAST scans, and triage findings — all through natural language.
Built on FastMCP 2.0, works with Cursor, Claude Code, Devin, and any MCP-compatible client.
Naming note: Snyk API & Web was formerly known as Probely. The API endpoints (
api.probely.com), web console (plus.probely.app), and MCP tool names (probely_*) still use the legacy domain and prefix. Environment variables and config sections use the newSAW/sawnaming.
See USER_GUIDE.md for usage, examples, and tool reference.
This repository is closed to public contributions. We appreciate community interest, but we do not accept pull requests, issues, or other contributions from external contributors at this time. If you have found a security issue, please see SECURITY.md.
Requirements
- Python 3.10+
- Node.js 18+ and npm (for web target login recording via
playwright-cli; optional if using Playwright MCP instead) - Snyk API & Web API key
Quick Start
Details
- Repository
- github.com/snyk/saw-mcp
- Categories
- Developer Tools, Security & Pentesting
- Package
snyk-apiweb-mcp- Transport
- STDIO
- Auth
- Required
- Registry
- MCP registry, active