Sonatype · Official

Sonatype Guide MCP server

Open source component intelligence: versions, vulnerabilities and Trust Score recommendations for dependencies.

Verified publisher namespaceRemoteSecurity & code quality
Registry name
com.sonatype/dependency-management-mcp-server
Latest version
1.0.2 · updated 2025-11-22
Links
Vendor docsSource

Install

Commands are generated from the registry record. Remote servers usually ask you to sign in with OAuth on first use.

Step-by-step guides
Add to CursorAdd to VS CodeAdd to KiroAdd to LM StudioAdd to GooseBundle with other servers

Claude Code

claude mcp add --transport http sonatype https://mcp.guide.sonatype.com/mcp

Codex

codex mcp add sonatype --url https://mcp.guide.sonatype.com/mcp

Gemini CLI

gemini mcp add --transport http sonatype https://mcp.guide.sonatype.com/mcp

Cursor

{
  "mcpServers": {
    "sonatype": {
      "url": "https://mcp.guide.sonatype.com/mcp"
    }
  }
}

VS Code (GitHub Copilot)

code --add-mcp '{"name":"sonatype","type":"http","url":"https://mcp.guide.sonatype.com/mcp"}'
Step-by-step for Claude CodeStep-by-step for CodexStep-by-step for Gemini CLIStep-by-step for CursorStep-by-step for VS Code (GitHub Copilot)

What the Sonatype Guide MCP server can do

From Sonatype's own MCP documentation.

Authentication

Bearer token in an Authorization header, generated after free sign-up.

https://mcp.guide.sonatype.com/mcp

Options

  • Connect over HTTP, or over stdio through npx -y mcp-remote for clients such as Visual Studio, JetBrains, Eclipse and Xcode.
  • An optional .github/copilot-instructions.md file tells Copilot to prefer the Sonatype tools for dependency work.

Good to know

  • Copilot Chat must be in Agent mode to see the tools.
  • Tool names are in the GitHub README, not on the setup page.
Sonatype MCP docs

Endpoints

  • streamable-http https://mcp.guide.sonatype.com/mcp

More security & code quality

SnykSonarQube

Get the weekly agent stack update

New official MCP servers, spec changes and harness releases, checked against the source. One email a week, no fluff.

Work at Sonatype?

Feature Sonatype Guide at the top of the security & code quality category and the MCP directory from $49/month.

Feature this server

Add an install badge to the Sonatype Guide README

Free. One link that installs the server in Cursor, VS Code, Kiro, LM Studio or Goose with one click, and gives Claude Code, Codex, Gemini CLI and 10 more agents their exact config.

Install in any agent (Markdown)

[![Install with AgentAtlas](https://img.shields.io/badge/install-15_agents-111111)](https://agentatlas.dev/tools/setup-kit?servers=sonatype)

Listed on AgentAtlas (Markdown)

[![Listed on AgentAtlas](https://img.shields.io/badge/listed_on-AgentAtlas-111111)](https://agentatlas.dev/mcp/sonatype)

Reviewed Oct 20, 2026. Official means published under Sonatype's namespace in the MCP registry. It is not a security audit.