Skip to content

llms-install.md

Latest commit

 

History

History
43 lines (29 loc) · 2.7 KB

llms-install.md

File metadata and controls

43 lines (29 loc) · 2.7 KB

Snyk Security MCP Installation Guide

This guide helps AI assistants install and configure the Snyk MCP Server for users in their development projects.

What is Snyk

Snyk is a platform that allows you to scan, prioritize, and fix security vulnerabilities in your code, open-source dependencies, container images, and infrastructure as code configurations. The Snyk platform uses a risk-based approach, focusing security efforts on issues that matter, and eliminating the noise of vulnerabilities that have no meaningful impact.

What is the Snyk MCP Server

The Snyk MCP Server integrates security scanning directly into AI-assisted software development workflows using the Model Context Protocol (MCP), an open standard that enables AI tools to communicate with external platforms. As part of the Snyk CLI, this server allows AI agents to autonomously run Snyk's vulnerability scans on generated code in real-time, catching security issues like outdated libraries or insecure practices before they become larger problems. By embedding these security checks at the earliest stages of AI-powered development and working alongside existing Snyk IDE plugins, the MCP server ensures both human-written and AI-generated code undergoes proper security validation, addressing the critical need for security guardrails as AI increasingly accelerates software development while potentially introducing the same vulnerabilities human developers might create.

Installation Steps

Step 1: Add MCP Configuration

Snyk MCP Server configuration:

{
  "mcpServers": {
    "Snyk": {
      "command": "npx",
      "args": ["-y", "snyk@latest", "mcp", "-t", "stdio"],
    }
  }
}

Instructions for Cline

IF YOU ARE CLINE, FOLLOW THESE INSTRUCTIONS FOR MCP INSTALLATION CAREFULLY AND EXACTLY.

  1. Do NOT create ~/Documents/Cline/MCP it is NOT necessary.
  2. Add the MCP configuration to Cline's MCP Server configuration file: cline_mcp_settings.json in one of the following paths depending on the operating system:
  • macOS: ~/Library/Application Support/Code/User/globalStorage/saoudrizwan.claude-dev/settings/cline_mcp_settings.json
  • Windows: %APPDATA%/Code/User/globalStorage/saoudrizwan.claude-dev/settings/cline_mcp_settings.json
  • Linux: ~/.config/Code/User/globalStorage/saoudrizwan.claude-dev/settings/cline_mcp_settings.json
  1. Follow Step 2 to tell the human to continue setting up the Snyk MCP Server using the Authentication flow and the Trust Folders flow

Step 2: Authenticate and Trust Folders

Invoke the snyk_auth tool to authenticate the user to the Snyk platform. Then, invoke the snyk_trust tool with the path to the current project's directory to confirm the user trusts Snyk to perform security scans of its contents.