Add the Sonatype Guide MCP server to VS Code (GitHub Copilot)

code --add-mcp '{"name":"sonatype","type":"http","url":"https://mcp.guide.sonatype.com/mcp"}'

Scopes, env vars, OAuth and limits: VS Code (GitHub Copilot) MCP config guide

VS Code opens the sign-in flow when Copilot first calls a remote OAuth server. Sonatype Guide is hosted by Sonatype, so there is nothing to install or keep updated.

Ask VS Code (GitHub Copilot) for something Sonatype Guide can do. Open source component intelligence: versions, vulnerabilities and Trust Score recommendations for dependencies. Approve the first tool call and check the result before allowing write actions automatically.

• · mcp.json uses a top-level servers key, not mcpServers.
• · code --add-mcp installs a server into your user profile from the terminal.

How do I add the Sonatype Guide MCP server to VS Code (GitHub Copilot)?

Run: code --add-mcp '{"name":"sonatype","type":"http","url":"https://mcp.guide.sonatype.com/mcp"}'. VS Code opens the sign-in flow when Copilot first calls a remote OAuth server.

Is this the official Sonatype Guide MCP server?

Yes. It is published by Sonatype as com.sonatype/dependency-management-mcp-server in the official MCP registry.

Does the Sonatype Guide MCP server need an API key?

It is a hosted server. Most hosted servers sign you in with OAuth the first time VS Code (GitHub Copilot) uses them; check Sonatype's docs for any plan or permission requirements.