Sonatype · Claude Code

Add the Sonatype Guide MCP server to Claude Code

Open source component intelligence: versions, vulnerabilities and Trust Score recommendations for dependencies.

Official serverRemoteSecurity & code quality

1. Add the server

Run in your terminal

claude mcp add --transport http sonatype https://mcp.guide.sonatype.com/mcp

Scopes, env vars, OAuth and limits: Claude Code MCP config guide

2. Sign in

Run /mcp inside Claude Code to sign in to remote servers that use OAuth. Sonatype Guide is hosted by Sonatype, so there is nothing to install or keep updated.

3. Try it

Ask Claude Code for something Sonatype Guide can do. Open source component intelligence: versions, vulnerabilities and Trust Score recommendations for dependencies. Approve the first tool call and check the result before allowing write actions automatically.

  • · Add --scope project to share a server with your team through .mcp.json in the repo.
  • · Use claude mcp list to see what is connected and claude mcp remove <name> to drop one.

Get the weekly agent stack update

New official MCP servers, spec changes and harness releases, checked against the source. One email a week, no fluff.

FAQ

How do I add the Sonatype Guide MCP server to Claude Code?
Run: claude mcp add --transport http sonatype https://mcp.guide.sonatype.com/mcp. Run /mcp inside Claude Code to sign in to remote servers that use OAuth.
Is this the official Sonatype Guide MCP server?
Yes. It is published by Sonatype as com.sonatype/dependency-management-mcp-server in the official MCP registry.
Does the Sonatype Guide MCP server need an API key?
It is a hosted server. Most hosted servers sign you in with OAuth the first time Claude Code uses them; check Sonatype's docs for any plan or permission requirements.

Links

Sonatype Guide in other clients

More security & code quality for Claude Code

Work at Sonatype?

Feature Sonatype Guide across the directory and its category from $49/month.

Feature this server

Reviewed Oct 20, 2026. Command generated from the registry record and checked against Claude Code's documented syntax.