Snyk CLI
The Snyk CLI for finding vulnerabilities in code, dependencies, containers and IaC, with a built-in MCP server and agent mode
- 5,692 ★ on the repository
- Last commit
Extended access
Why this level
- Reads code and dependency manifests and sends data to the Snyk cloud
- May run the project build during scanning
Install
- Works in
In your terminal, with SkillFoxx CLI
npx skillfoxx add cli/snyk-cliDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewExtended accessThe tool runs code or makes network calls and only reads external data.
- Reads code and dependency manifests and sends data to the Snyk cloud
- May run the project build during scanning
This is third-party code. Review the repository files before installing.
What it does
Snyk CLI checks open-source dependencies with snyk test, source code with snyk code test, Docker images with snyk container test and Terraform or Kubernetes files with snyk iac test. For each issue it shows severity, how the vulnerable module got in and fix guidance. snyk monitor saves a dependency snapshot and alerts you about new vulnerabilities. For AI agents there is an experimental snyk agent test with compact output, and snyk mcp -t stdio starts an MCP server with scanning tools and lite, full and experimental profiles.
Who it is for. For developers and security engineers who want the agent to scan code and dependencies with Snyk.
Good fit when
- You want to scan dependencies and code for vulnerabilities from the agent
- You need to scan Docker images or IaC files
- Your team already uses Snyk
Not a fit when
- You need fully local analysis without a cloud service
- You have no Snyk account and cannot create one
Example request
Scan my directory for security issuesLimitations
A Snyk account and sign-in are required; the MCP server provides the snyk_auth tool for that. Private repositories have test limits. Many projects must be built before dependency scanning, and the package manager must be on PATH. Scanning goes through the Snyk cloud, and access from Russia is unverified. The CLI does not accept external contributions.
How to disable. Delete the Snyk block from the client's MCP config. Remove a global CLI install with npm uninstall -g snyk.
FAQ
How do I reduce the number of tools?
Pick the lite profile with the --profile flag or the SNYK_MCP_PROFILE variable.
What does snyk agent test do?
It runs open-source, code and secrets scans in one pass with compact output for agents. The command is experimental.
Discussion
No questions or reviews yet.
Related
CLI toolsA Snyk CLI that discovers installed MCP servers, skills and agents on your machine and checks them for prompt injections and malicious payloads
Security scanner for agent skills and MCP servers: finds prompt injection, data exfiltration and supply chain risks before install
A security scanner for AI-written code: secrets, dependencies, MCP and CI, findings investigated with evidence, and fixes you approve
A security scanner for agent skills: finds prompt injection, data exfiltration and malicious code before you install
AgentShield audits the .claude folder for plaintext keys, broad permissions, dangerous hooks and risky MCP servers and grades the setup from A to F
An MCP server that gives the agent vulnerability triage: NVD data, EPSS, the CISA KEV catalog, MITRE ATT&CK mapping and one-call CVE risk scoring
README in short
The README explains which project types Snyk scans and points to install and auth docs. It gives commands for dependencies, code, containers and IaC, monitoring mode and useful flags such as --json and --severity-threshold. It mentions agent mode and test limits. MCP server setup is documented in the Snyk Studio docs.