Sonatype · Codex
Add the Sonatype Guide MCP server to Codex
Open source component intelligence: versions, vulnerabilities and Trust Score recommendations for dependencies.
1. Add the server
Run in your terminal
codex mcp add sonatype --url https://mcp.guide.sonatype.com/mcp
Scopes, env vars, OAuth and limits: Codex MCP config guide
2. Sign in
Run codex mcp login <name> to complete OAuth for a remote server. Sonatype Guide is hosted by Sonatype, so there is nothing to install or keep updated.
3. Try it
Ask Codex for something Sonatype Guide can do. Open source component intelligence: versions, vulnerabilities and Trust Score recommendations for dependencies. Approve the first tool call and check the result before allowing write actions automatically.
- · Each server is a [mcp_servers.<name>] table in config.toml.
- · Use enabled_tools or disabled_tools to keep the tool list short.
Get the weekly agent stack update
New official MCP servers, spec changes and harness releases, checked against the source. One email a week, no fluff.
FAQ
- How do I add the Sonatype Guide MCP server to Codex?
- Run: codex mcp add sonatype --url https://mcp.guide.sonatype.com/mcp. Run codex mcp login <name> to complete OAuth for a remote server.
- Is this the official Sonatype Guide MCP server?
- Yes. It is published by Sonatype as com.sonatype/dependency-management-mcp-server in the official MCP registry.
- Does the Sonatype Guide MCP server need an API key?
- It is a hosted server. Most hosted servers sign you in with OAuth the first time Codex uses them; check Sonatype's docs for any plan or permission requirements.
Links
Sonatype Guide in other clients
More security & code quality for Codex
Work at Sonatype?
Feature Sonatype Guide across the directory and its category from $49/month.
Reviewed Oct 20, 2026. Command generated from the registry record and checked against Codex's documented syntax.