Sonatype Guide MCP server
by Sonatype
Vulnerabilities, safe versions and licenses for open source packages.
What it can do
- Check package vulnerabilities
- Find safe versions
- Compare packages
- Check licenses
Through MCP1, every tool call is checked against your groups and rules, and recorded in the audit log.
How it connects
Connects with a token (Sonatype Guide token). Free personal token from your Sonatype Guide account settings. MCP1 encrypts it at rest.
- Endpoint
https://mcp.guide.sonatype.com/mcp- Transport
- Streamable HTTP
With MCP1
Sonatype Guide for the whole team, behind one URL
- 01
Install it once
An admin adds Sonatype Guide from the MCP1 catalog. Its authentication or token stays sealed in MCP1, never on a laptop.
- 02
Decide who gets what
Open it to groups, fully or read-only, and set rules per tool. Destructive tools can need an admin.
- 03
Connect any client
Claude, Cursor, ChatGPT, Codex and the rest connect one gateway URL and sign in with their own account.
More for security & it
See all security & it servers- GitHubEngineering
Repositories, issues, pull requests, code search and Actions.
Token - CloudflareEngineering
The whole Cloudflare API: Workers, DNS, R2, zones and more.
One-click auth - DatadogEngineering
Logs, metrics, traces, monitors and incidents in Datadog.
One-click auth - ClerkEngineering
Clerk SDK snippets plus your apps, users and organizations.
One-click authBeta - WorkOSEngineering
Manage your WorkOS workspace: users, orgs, SSO and directories.
One-click auth - ngrokEngineering
Manage ngrok endpoints, domains, traffic policies and credentials.
TokenPreview
