Add the Sonatype Guide MCP server to Cursor

{
  "mcpServers": {
    "sonatype": {
      "url": "https://mcp.guide.sonatype.com/mcp"
    }
  }
}

Scopes, env vars, OAuth and limits: Cursor MCP config guide

Cursor prompts you to sign in the first time a remote OAuth server is used. Sonatype Guide is hosted by Sonatype, so there is nothing to install or keep updated.

Ask Cursor for something Sonatype Guide can do. Open source component intelligence: versions, vulnerabilities and Trust Score recommendations for dependencies. Approve the first tool call and check the result before allowing write actions automatically.

• · Remote servers take a url; local servers take command and args.
• · Values can reference ${env:NAME} so secrets stay out of the file.

How do I add the Sonatype Guide MCP server to Cursor?

Run: { …. Cursor prompts you to sign in the first time a remote OAuth server is used.

Is this the official Sonatype Guide MCP server?

Yes. It is published by Sonatype as com.sonatype/dependency-management-mcp-server in the official MCP registry.

Does the Sonatype Guide MCP server need an API key?

It is a hosted server. Most hosted servers sign you in with OAuth the first time Cursor uses them; check Sonatype's docs for any plan or permission requirements.