snyk avatar

Snyk API & Web MCP Server

snyk/saw-mcpOfficial

Connects your AI assistant to Snyk API & Web (formerly Probely) for running DAST scans and triaging vulnerabilities through natural language. You can onboard API targets from OpenAPI specs or Postman collections, configure authentication for web apps, kick off scans, and manage findings without touching the web console. Built on FastMCP 2.0 with tools prefixed `probely_*` for backward compatibility. Requires a scoped API key from the Snyk API & Web platform. Reach for this when you want security testing integrated into your coding workflow, whether you're spinning up new targets or investigating scan results alongside your code.

GitHub stars
7
tool
1
auth
Secret needed
transport
STDIO
env var
1
last updated
Apr 27, 2026

Tools

1 tools

Public tool metadata for what this MCP can expose to an agent.

probely_configure_form_loginSimple single-page login only; no multi-step flows or 2FA.

Simple single-page login only; no multi-step flows or 2FA.

No parameter schema in public metadata yet.

Sponsors

Configuration

MCP_SAW_API_KEY*secret

Snyk API & Web API key. Create at https://plus.probely.app/api-keys

Readme

SAW MCP Banner

Snyk API & Web MCP Server

Connect your AI coding assistant to Snyk API & Web so it can onboard scan targets, configure authentication, run DAST scans, and triage findings — all through natural language.

Built on FastMCP 2.0, works with Cursor, Claude Code, Devin, and any MCP-compatible client.

Naming note: Snyk API & Web was formerly known as Probely. The API endpoints (api.probely.com), web console (plus.probely.app), and MCP tool names (probely_*) still use the legacy domain and prefix. Environment variables and config sections use the new SAW / saw naming.

See USER_GUIDE.md for usage, examples, and tool reference.

This repository is closed to public contributions. We appreciate community interest, but we do not accept pull requests, issues, or other contributions from external contributors at this time. If you have found a security issue, please see SECURITY.md.

Requirements

  • Python 3.10+
  • Node.js 18+ and npm (for web target login recording via playwright-cli; optional if using Playwright MCP instead)
  • Snyk API & Web API key

Quick Start


View the full README on GitHub

Details

Repository
github.com/snyk/saw-mcp
Categories
Developer Tools, Security & Pentesting
Package
snyk-apiweb-mcp
Transport
STDIO
Auth
Required
Registry
MCP registry, active

More from snyk

Related Developer Tools MCP servers

View all
1vish288 avatarGitLabvish288/mcp-gitlabGitLab MCP server (MCP 2026-07-28): projects, MRs, pipelines, CI/CD, issues; writes or read-only7stars
2fabianschurig avatarBitbucket MCPfabianschurig/bitbucket-cliBitbucket Cloud MCP in Go: complete API auto-generated from spec, customizable prompts.0stars
3domdomegg avatarShell Execdomdomegg/shell-exec-mcpExecute bash commands with background job support.5stars
4oncorporation avatarFileSystem MCP Serveroncorporation/filesystem_serverSecure filesystem access for AI agents with configurable directory and file type restrictions5stars
5crypto-ninja avatarGithub Mcp Servercrypto-ninja/mcp-server-for-githubAI-optimized GitHub MCP server: 112 tools, 98% token reduction, compact responses.0stars
6detailobsessed avatarEfficient Gitlabdetailobsessed/efficient-gitlab-mcpToken-efficient GitLab MCP: 167 tools via 3 meta-tools, field projection, keyset pagination3stars