# Socket Mcp > Model Context Protocol server for socket.dev integration - **Type:** MCP server - **Install:** `agentstack add mcp-socketdev-socket-mcp` - **Verified:** Pending review - **Seller:** [SocketDev](https://agentstack.voostack.com/s/socketdev) - **Installs:** 0 - **Category:** [Integrations](https://agentstack.voostack.com/c/integrations) - **Latest version:** 0.1.0 - **License:** MIT - **Upstream author:** [SocketDev](https://github.com/SocketDev) - **Source:** https://github.com/SocketDev/socket-mcp - **Website:** https://www.npmjs.com/package/@socketsecurity/mcp ## Install ```sh agentstack add mcp-socketdev-socket-mcp ``` Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent. ## About # Socket MCP Server [](https://socket.dev/npm/package/@socketsecurity/mcp) [](https://github.com/SocketDev/socket-mcp/actions/workflows/ci.yml) [](https://twitter.com/SocketSecurity) [](https://bsky.app/profile/socket.dev) A Model Context Protocol (MCP) server for Socket integration — lets AI assistants query dependency vulnerability scores and security metadata. ## Why this repo exists Socket MCP exposes Socket.dev's package-scoring API through the Model Context Protocol, so any MCP-aware AI assistant (Claude, VS Code Copilot, Cursor, Windsurf) can score a package, audit a `package.json`, or flag risky dependencies as part of a conversation. It ships as both a hosted public server (`https://mcp.socket.dev/`, no setup) and a self-hostable npm package, so you can choose between zero-friction and full data isolation. ## ✨ Features - 🔍 **Dependency Security Scanning** - Get comprehensive security scores for npm, PyPI, cargo, Maven, NuGet, RubyGems, Go Modules, and more ([supported ecosystems](https://docs.socket.dev/docs/language-support)) - 🌐 **Public Hosted Service** - Use our public server at `https://mcp.socket.dev/`; sign in once via OAuth, no self-hosting - 🚀 **Multiple Deployment Options** - Run locally via stdio, HTTP, or use our service - 🤖 **AI Assistant Integration** - Works seamlessly with Claude, VS Code Copilot, Cursor, and other MCP clients - 📊 **Batch Processing** - Check multiple dependencies in a single request - 🔒 **OAuth Sign-In** - Public server authenticates through your MCP client's OAuth flow; no API key to copy or manage 🛠️ This project is in early development and rapidly evolving. ## Install ### Option 1: Use the public Socket MCP server (recommended) The easiest way to get started. The public server uses OAuth — your MCP client opens a browser to sign in to Socket on first connect; no API key to copy or manage. Click a button below to install in your favorite AI assistant. [](https://vscode.dev/redirect/mcp/install?name=socket-mcp&config={"url":"https://mcp.socket.dev/","type":"http"}) [](https://cursor.com/en/install-mcp?name=socket-mcp&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vbWNwLnNvY2tldC5kZXYvIn0%3D) Manual install — Claude Desktop / Claude Code > [!NOTE] > Custom integrations are not available to all paid versions of Claude. Check [here](https://support.anthropic.com/en/articles/11175166-about-custom-integrations-using-remote-mcp) for more information. 1. In Claude Desktop, go to Settings > Developer > Edit Config. 2. Add the Socket MCP server configuration: ```json { "mcpServers": { "socket-mcp": { "type": "http", "url": "https://mcp.socket.dev/" } } } ``` 3. Save the configuration and restart Claude Desktop. 4. Now you can ask Claude "Check the security score for express version 4.18.2". For Claude Code: ```sh claude mcp add --transport http socket-mcp https://mcp.socket.dev/ ``` Manual install — VS Code ```sh # For VS Code with GitHub Copilot code --add-mcp '{"name":"socket-mcp","type":"http","url":"https://mcp.socket.dev/"}' ``` Or add to `.vscode/mcp.json`: ```json { "servers": { "socket-mcp": { "type": "http", "url": "https://mcp.socket.dev/" } } } ``` Manual install — Cursor `Cursor Settings` → `MCP` → `Add new MCP Server`. Name `socket-mcp`, `http` type, URL `https://mcp.socket.dev/`. ```json { "mcpServers": { "socket-mcp": { "type": "http", "url": "https://mcp.socket.dev/" } } } ``` Manual install — Windsurf > [!WARNING] > Windsurf does not support `http` type MCP servers yet. Use the stdio configuration in Option 2 below. ```json { "mcpServers": { "socket-mcp": { "serverUrl": "https://mcp.socket.dev/mcp" } } } ``` Manual install — Factory [Factory](https://factory.ai) is an AI-powered software engineering platform. Install the Socket MCP server with the Factory CLI: ```bash droid mcp add socket https://mcp.socket.dev/ --type http ``` To self-host with an API key instead, see Option 2 below and register the stdio command with `droid mcp add`. Alternatively, type `/mcp` within the Factory droid to manage MCP servers from an interactive UI. Learn more in the [Factory MCP documentation](https://docs.factory.ai/cli/configuration/mcp). ### Option 2: Self-host the Socket MCP server To run your own instance, create an API key first (only the `packages:list` permission scope is needed; see [creating-and-managing-api-tokens](https://docs.socket.dev/reference/creating-and-managing-api-tokens)). Option 2a — Stdio mode (default) Claude Code: ```sh claude mcp add socket-mcp -e SOCKET_API_TOKEN="your-api-token-here" -- npx -y @socketsecurity/mcp@latest # socket-hook: allow npx ``` Most other MCP clients: ```json { "mcpServers": { "socket-mcp": { "command": "npx", // socket-hook: allow npx "args": ["@socketsecurity/mcp@latest"], "env": { "SOCKET_API_TOKEN": "your-api-token-here" } } } } ``` Option 2b — HTTP mode Run the server in HTTP mode using npx: ```sh MCP_HTTP_MODE=true SOCKET_API_TOKEN=your-api-token npx @socketsecurity/mcp@latest --http # socket-hook: allow npx ``` Environment variables for HTTP mode: | Variable | Required | Default | Description | | ------------------------------------------ | ------------------------------------------------------------ | ---------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `SOCKET_API_TOKEN` | Required unless OAuth is enabled | None | Socket API token used for outbound API calls. Legacy aliases (`SOCKET_API_KEY`, `SOCKET_CLI_API_TOKEN`, `SOCKET_CLI_API_KEY`, `SOCKET_SECURITY_API_TOKEN`, `SOCKET_SECURITY_API_KEY`) are accepted via the fleet's `getSocketApiToken()` helper. If unset in OAuth-enabled HTTP mode, the validated incoming bearer token is forwarded upstream instead. | | `SOCKET_OAUTH_ISSUER` | Set together with the two introspection vars to enable OAuth | None | OAuth issuer URL used for metadata discovery and incoming bearer-token validation. | | `SOCKET_OAUTH_INTROSPECTION_CLIENT_ID` | With OAuth | None | Client ID used for token introspection. | | `SOCKET_OAUTH_INTROSPECTION_CLIENT_SECRET` | With OAuth | None | Client secret used for token introspection. | | `SOCKET_OAUTH_REQUIRED_SCOPES` | No | _(none)_ | Space-delimited scopes required on incoming access tokens. When unset, no scope is enforced — any active token passes. | | `SOCKET_API_URL` | No | Production Socket API URL, or localhost when `SOCKET_DEBUG=true` | Override the upstream Socket API endpoint. Useful for local development and testing. | | `SOCKET_DEBUG` | No | `false` | Switches the default upstream Socket API endpoint to localhost when `SOCKET_API_URL` is unset. | | `TRUST_PROXY` | No | `false` | When `true`, trust `X-Forwarded-Host` and `X-Forwarded-Proto` when building OAuth metadata URLs. Enable only behind a trusted reverse proxy that rewrites these headers. | | `MCP_PORT` | HTTP mode only | `3000` | Port to bind the HTTP server to. | `SOCKET_API_URL` and `SOCKET_DEBUG` also apply in stdio mode. To enable OAuth-backed auth for incoming MCP requests: ```sh MCP_HTTP_MODE=true \ SOCKET_OAUTH_ISSUER=https://issuer.example.com \ SOCKET_OAUTH_INTROSPECTION_CLIENT_ID=your-client-id \ SOCKET_OAUTH_INTROSPECTION_CLIENT_SECRET=your-client-secret \ npx @socketsecurity/mcp@latest --http # socket-hook: allow npx ``` Add `TRUST_PROXY=true` only when the server is deployed behind a trusted reverse proxy or load balancer that normalizes the forwarded host and protocol headers. Configure your MCP client to connect to the HTTP server: ```json { "mcpServers": { "socket-mcp": { "type": "http", "url": "http://localhost:3000" } } } ``` ## Usage Once installed, ask your AI assistant questions like: - "Check the security score for express version 4.18.2" - "Analyze the security of my package.json dependencies" - "What are the vulnerability scores for react, lodash, and axios?" ### Tools exposed #### depscore Query the Socket API for dependency scoring information. Returns supply chain, quality, maintenance, vulnerability, and license scores per package. | Parameter | Type | Required | Default | Description | | ---------------------- | ------ | -------- | ----------- | -------------------------------------------------- | | `packages` | Array | ✅ Yes | - | Array of package objects to analyze | | `packages[].ecosystem` | String | No | `"npm"` | Package ecosystem. See Supported ecosystems below. | | `packages[].depname` | String | ✅ Yes | - | Name of the dependency/package | | `packages[].version` | String | No | `"unknown"` | Version of the dependency | **Supported ecosystems** Based on [Socket's language support](https://docs.socket.dev/docs/language-support). The `ecosystem` parameter maps to PURL types: | Ecosystem | PURL type | Package managers | Maturity | | ----------------------- | ---------- | ------------------------- | --------------------------------------------------- | | JavaScript & TypeScript | `npm` | npm, yarn, pnpm, Bun, VLT | GA | | Python | `pypi` | uv, pip, Poetry, Anaconda | GA | | Go | `golang` | Go Modules | GA | | Java / Scala / Kotlin | `maven` | Maven, Gradle, sbt | GA | | Ruby | `gem` | Bundler | GA | | .NET (C#, F#, VB) | `nuget` | NuGet | GA | | Rust | `cargo` | cargo | GA | | PHP | `composer` | Composer | Experimental | | GitHub Actions | `actions` | GitHub Actions workflows | Experimental (workflow scanning, not package-level) | Example request: ```json { "packages": [ { "ecosystem": "npm", "depname": "express", "version": "4.18.2" }, { "ecosystem": "pypi", "depname": "fastapi", "version": "0.100.0" } ] } ``` Sample response: ``` pkg:npm/express@4.18.2: supply_chain: 1.0, quality: 0.9, maintenance: 1.0, vulnerability: 1.0, license: 1.0 Report: https://socket.dev/npm/package/express pkg:pypi/fastapi@0.100.0: supply_chain: 1.0, quality: 0.95, maintenance: 0.98, vulnerability: 1.0, license: 1.0 Report: https://socket.dev/pypi/package/fastapi ``` #### organizations List the Socket organizations the authenticated user belongs to. Takes no parameters. Use it to discover the `org_slug` value that the org-scoped tools (`alerts`, `threat_feed`) require. This tool needs a Socket API token. See [Authentication for organization-scoped tools](#authentication-for-organization-scoped-tools) below. #### alerts List the latest security alerts for one Socket organization: supply-chain, vulnerability, quality, license, and maintenance issues across the org's monitored packages. Backed by `GET /v0/orgs/{org_slug}/alerts`. Results are paginated; pass the previous response's `endCursor` as `cursor` to fetch the next page. | Parameter | Type | Required | Default | Description | | --------------- | ------- | -------- | ------- | ------------------------------------------------------------------------------------- | | `org_slug` | String | ✅ Yes | - | Organization slug (get it from the `organizations` tool) | | `severity` | String | No … ## Source & license This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code. - **Author:** [SocketDev](https://github.com/SocketDev) - **Source:** [SocketDev/socket-mcp](https://github.com/SocketDev/socket-mcp) - **License:** MIT - **Homepage:** https://www.npmjs.com/package/@socketsecurity/mcp Install and usage instructions live in the source repository linked above. ## Pricing - **Free** — Free ## Security capabilities Automated source analysis of v0.1.0 — what this tool can access: - **Network access:** yes - **Filesystem access:** no - **Shell / process execution:** no - **Environment & secrets:** no - **Dynamic code execution:** no *"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.* ## Versions - **0.1.0** — security scan: flagged — Imported from the upstream source. ## Links - Listing page: https://agentstack.voostack.com/l/mcp-socketdev-socket-mcp - Seller: https://agentstack.voostack.com/s/socketdev - Browse the marketplace: https://agentstack.voostack.com/browse --- Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.