Dependency Management Mcp Server
sonatype/dependency-management-mcp-server
Connects your AI assistant directly to Sonatype's dependency intelligence platform, giving you real-time security and compliance data without leaving your IDE. You get tools to query component versions, scan for CVEs, check license compliance, and assess dependency health through Sonatype's Trust Score system. When you're adding or updating a package, your assistant can pull vulnerability reports and remediation guidance on the spot. Runs as a remote HTTP server at mcp.guide.sonatype.com, so no local installation beyond configuring your IDE with a bearer token from your Sonatype Guide account. Particularly helpful if you're already using Sonatype's ecosystem and want that intelligence available during AI-assisted coding sessions.
- GitHub stars
- 72
- tools
- 3
- transport
- HTTP
- last updated
- Nov 22, 2025
Tools
3 toolsPublic tool metadata for what this MCP can expose to an agent.
getComponentVersionGets component information about a specific version of a component
Gets component information about a specific version of a component
No parameter schema in public metadata yet.
getLatestComponentVersionGets component information about the latest version of a component
Gets component information about the latest version of a component
No parameter schema in public metadata yet.
getRecommendedComponentVersionsGets a set of recommended versions to upgrade to based on the current version of a component. If no version is provided, gets a set of recommended versions to start with for the component
Gets a set of recommended versions to upgrade to based on the current version of a component. If no version is provided, gets a set of recommended versions to start with for the component
No parameter schema in public metadata yet.
Sponsors
Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthly
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any language
Agent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any languageReadme
Sonatype MCP Server
A Model Context Protocol (MCP) server that connects AI assistants to Sonatype's dependency management and security intelligence platform. Empower your AI coding assistant with real-time insights into open source security vulnerabilities, license compliance, and dependency health.
Overview
The Sonatype MCP Server enables AI assistants to access Sonatype's comprehensive dependency intelligence directly within your development workflow. By integrating with the Model Context Protocol, your AI assistant can help you make informed decisions about dependencies, identify security risks, and maintain compliance — all without leaving your IDE.
Key Features
Details
- Repository
- github.com/sonatype/dependency-management-mcp-server
- Category
- Security & Pentesting
- Transport
- HTTP
- Registry
- MCP registry, active
