Dependency Management Mcp Server
Connects your AI assistant directly to Sonatype's dependency intelligence platform, giving you real-time security and compliance data without leaving your IDE. You get tools to query component versions, scan for CVEs, check license compliance, and assess dependency health through Sonatype's Trust Score system. When you're adding or updating a package, your assistant can pull vulnerability reports and remediation guidance on the spot. Runs as a remote HTTP server at mcp.guide.sonatype.com, so no local installation beyond configuring your IDE with a bearer token from your Sonatype Guide account. Particularly helpful if you're already using Sonatype's ecosystem and want that intelligence available during AI-assisted coding sessions.
- GitHub stars
- 72
- tools
- 3
- transport
- HTTP
- last updated
- Nov 22, 2025
Tools
3 toolsPublic tool metadata for what this MCP can expose to an agent.
getComponentVersionGets component information about a specific version of a component
Gets component information about a specific version of a component
No parameter schema in public metadata yet.
getLatestComponentVersionGets component information about the latest version of a component
Gets component information about the latest version of a component
No parameter schema in public metadata yet.
getRecommendedComponentVersionsGets a set of recommended versions to upgrade to based on the current version of a component. If no version is provided, gets a set of recommended versions to start with for the component
Gets a set of recommended versions to upgrade to based on the current version of a component. If no version is provided, gets a set of recommended versions to start with for the component
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageReadme
Sonatype MCP Server
A Model Context Protocol (MCP) server that connects AI assistants to Sonatype's dependency management and security intelligence platform. Empower your AI coding assistant with real-time insights into open source security vulnerabilities, license compliance, and dependency health.
Overview
The Sonatype MCP Server enables AI assistants to access Sonatype's comprehensive dependency intelligence directly within your development workflow. By integrating with the Model Context Protocol, your AI assistant can help you make informed decisions about dependencies, identify security risks, and maintain compliance — all without leaving your IDE.
Key Features
Details
- Repository
- github.com/sonatype/dependency-management-mcp-server
- Category
- Security & Pentesting
- Transport
- HTTP
- Registry
- MCP registry, active
Related Security & Pentesting MCP servers
View all
cloud-auditgebalamariusz/cloud-auditAWS security scanner with attack chain detection, IAM privilege escalation, and fixes59stars
Kastellkastelldev/kastellServer security audit (413 checks), hardening, and fleet management across 4 cloud providers.52stars
ContrastAPIupinar/contrastapi55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.36stars
Grasp — Code Architecture & Dependency Analysisashfordeou/graspCodebase analysis: dependency graphs, security scanning, and refactor plans for GitHub and GitLab.31stars
Mcp Cinema4dkumoproductions/mcp-cinema4dMCP server for Cinema 4D — entity CRUD, parameter-level access, batched undo, security controls.29stars
Repository Intelligencenirholas/lyra-intelAnalyze repos of any size - security scanning code analysis monorepo support0stars