Socket MCP 允许 AI 助手通过模型上下文协议（MCP）查询 Socket 的依赖安全评分和元数据。 用它来评分软件包、审计package.json，或识别对话中的风险依赖。 将你的MCP客户端连接到托管服务器https://mcp.socket.dev/，或者自己运行npm包。

✨ 特色

• 🔍 依赖安全扫描 - 获取npm、PyPI、cargo、Maven、NuGet、RubyGems、Go模块等（支持生态系统）的全面安全评分
• 🌐 公共托管服务 - 使用我们在https://mcp.socket.dev/的公共服务器;通过OAuth登录一次，不允许自托管
• 🚀 多种部署选项 - 通过stdio、HTTP本地运行，或使用我们的服务
• 🤖 AI 助手集成 - 与 Claude、VS Code Copilot、Cursor 及其他 MCP 客户端无缝协作
• 📊 批处理 - 在单一请求中检查多个依赖关系
• 🔒 OAuth 登录 - 公共服务器通过你的 MCP 客户端的 OAuth 流程进行认证;无需复制或管理 API 密钥

🛠️ 该项目处于早期开发阶段，且发展迅速。

安装

选项1：使用公共的套接字MCP服务器（推荐）

Socket MCP Server

Socket MCP lets AI assistants query Socket’s dependency security scores and metadata through the Model Context Protocol (MCP). Use it to score a package, audit a package.json, or identify risky dependencies in a conversation. Connect your MCP client to the hosted server at https://mcp.socket.dev/ and authenticate through OAuth, or run the npm package yourself.

✨ Features

• 🔍 Dependency Security Scanning - Get comprehensive security scores for npm, PyPI, cargo, Maven, NuGet, RubyGems, Go Modules, and more (supported ecosystems)
• 🌐 Public Hosted Service - Use our public server at https://mcp.socket.dev/ and sign in through your MCP client’s OAuth flow
• 🚀 Multiple Deployment Options - Run locally via stdio, HTTP, or use our service
• 🤖 AI Assistant Integration - Connect from MCP-compatible clients; OAuth behavior varies by client
• 📊 Batch Processing - Check multiple dependencies in a single request
• 🔒 OAuth Sign-In - Public server authenticates through your MCP client’s OAuth flow; no API key to copy or manage

🛠️ This project is in early development and rapidly evolving.

Install

Option 1: Use the public Socket MCP server (recommended)

The public server requires Socket sign-in through OAuth for every tool call, including package scoring. Some MCP clients need an explicit sign-in step. You do not need an API key.

• Install in VS Code.
• Install in Cursor.

Add the hosted server through Claude’s custom connector settings. The Developer configuration file is for local servers.

1. Open Customize > Connectors in Claude.
2. Select Add custom connector and enter https://mcp.socket.dev/ as the server URL. On Team and Enterprise plans, an organization owner adds the connector through Organization settings > Connectors first.