Socket MCP Server

Socket MCP server for scanning dependencies

Remote serverstreamable-httpPython

What is the Socket MCP Server?

Socket MCP server for scanning dependencies

What you get

A Model Context Protocol (MCP) server for Socket integration — lets AI assistants query dependency vulnerability scores and security metadata.

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

ToolWhat it does
depscoreQuery the Socket API for dependency scoring information. Returns supply chain, quality, maintenance, vulnerability, and license scores per package.
organizationsList the Socket organizations the authenticated user belongs to. Takes no parameters. Use it to discover the org_slug value that the org-scoped tools (alerts, threat_feed) require.
alertsList the latest security alerts for one Socket organization: supply-chain, vulnerability, quality, license, and maintenance issues across the org's monitored packages. Backed by GET /v0/orgs/{org_slug}/alerts. Results ar

How to install the Socket MCP Server

{
     "mcpServers": {
       "socket-mcp": {
         "type": "http",
         "url": "https://mcp.socket.dev/"
       }
     }
   }

Configuration as documented by the project. Restart the client after saving.

Configuration

VariableDescriptionRequired
SOCKET_API_TOKENCredential the server authenticates with.Yes
SOCKET_OAUTH_INTROSPECTION_CLIENT_IDConfiguration value read at startup.Optional
SOCKET_OAUTH_INTROSPECTION_CLIENT_SECRETCredential the server authenticates with.Yes
SOCKET_API_BASE_URLEndpoint or connection string the server talks to.Yes
SOCKET_API_KEYCredential the server authenticates with.Yes
SOCKET_CLI_API_TOKENCredential the server authenticates with.Yes
SOCKET_CLI_API_KEYCredential the server authenticates with.Yes
SOCKET_SECURITY_API_TOKENCredential the server authenticates with.Yes

Example prompts to try

  • “Use Socket MCP to depscore.”
  • “Use Socket MCP to organizations.”
  • “Use Socket MCP to alerts.”

Frequently asked questions

Socket MCP server for scanning dependencies Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.