Sonatype · Gemini CLI
Add the Sonatype Guide MCP server to Gemini CLI
Open source component intelligence: versions, vulnerabilities and Trust Score recommendations for dependencies.
1. Add the server
Run in your terminal
gemini mcp add --transport http sonatype https://mcp.guide.sonatype.com/mcp
Scopes, env vars, OAuth and limits: Gemini CLI MCP config guide
2. Sign in
Run /mcp auth <name> inside Gemini CLI to sign in to an OAuth server. Sonatype Guide is hosted by Sonatype, so there is nothing to install or keep updated.
3. Try it
Ask Gemini CLI for something Sonatype Guide can do. Open source component intelligence: versions, vulnerabilities and Trust Score recommendations for dependencies. Approve the first tool call and check the result before allowing write actions automatically.
- · In settings.json, streamable HTTP servers use httpUrl, SSE servers use url, local servers use command.
- · includeTools and excludeTools limit which tools the model sees.
Get the weekly agent stack update
New official MCP servers, spec changes and harness releases, checked against the source. One email a week, no fluff.
FAQ
- How do I add the Sonatype Guide MCP server to Gemini CLI?
- Run: gemini mcp add --transport http sonatype https://mcp.guide.sonatype.com/mcp. Run /mcp auth <name> inside Gemini CLI to sign in to an OAuth server.
- Is this the official Sonatype Guide MCP server?
- Yes. It is published by Sonatype as com.sonatype/dependency-management-mcp-server in the official MCP registry.
- Does the Sonatype Guide MCP server need an API key?
- It is a hosted server. Most hosted servers sign you in with OAuth the first time Gemini CLI uses them; check Sonatype's docs for any plan or permission requirements.
Links
Sonatype Guide in other clients
More security & code quality for Gemini CLI
Work at Sonatype?
Feature Sonatype Guide across the directory and its category from $49/month.
Reviewed Oct 20, 2026. Command generated from the registry record and checked against Gemini CLI's documented syntax.