Sonatype Dependency Management Mcp Server
About
The Sonatype MCP Server enables AI assistants to access Sonatype's comprehensive dependency intelligence directly within your development workflow. By integrating with the Model Context Protocol, your AI assistant can help you make informed decisions about dependencies, identify
Details
- Author
- sonatype
- Downloads
- 212
- Categories
- Other
Jump to
—
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
Sonatype Dependency Management Mcp ServerCommand (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
The server runs as a remote MCP server. Add it to your IDE or AI assistant using the provided configuration: for GitLab Code Assist, add "url": "https://mcp.guide.sonatype.com/mcp" to the MCP servers object; for Claude Code, run claude mcp add --transport http sonatype-mcp https://mcp.guide.sonatype.com/mcp; for VS Code Copilot, update mcp.json with the same URL and "type": "http"; for Windsurf / IntelliJ with Junie / Kiro, use "command": "npx", "args": ["mcp-remote", "https://mcp.guide.sonatype.com/mcp"]; and for Cursor, add the URL with "type": "http".
getComponentVersion
Returns detailed analysis of a specific dependency or multiple dependencies with metadata about quality, license and security. Dependencies can be referred to as packages, components or libraries. They can be transitive (brought in by other dependencies) or direct (explicitly added to the project).
getLatestComponentVersion
Returns the latest version of a dependency or multiple dependencies with quality, license and security data. Dependencies can be referred to as packages, components or libraries. They can be transitive (brought in by other dependencies) or direct (explicitly added to the project).
getRecommendedComponentVersions
Returns top dependency version recommendations ranked by Developer Trust Score with security, licensing, and quality analysis. Developer Trust Score is a measure of quality, security, licensing, and maintainability. Use this when selecting a new component to add to a project (without version) or when upgrading an existing component (with version). Dependencies can be referred to as packages, components or libraries. They can be transitive (brought in by other dependencies) or direct (explicitly added to the project).
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"sonatype dependency management mcp server": {
"sonatype-mcp": {
"url": "https://mcp.guide.sonatype.com/mcp",
"type": "http"
}
}
}
}Servers
{
"sonatype-mcp": {
"url": "https://mcp.guide.sonatype.com/mcp",
"type": "http"
}
}Setup
The Sonatype MCP Server runs as a remote MCP server. Choose the setup instructions for your IDE or AI assistant:
Gemini Code Assist
{
"mcpServers": {
"discoveredServer": {
"url": "https://mcp.guide.sonatype.com/mcp"
}
}
}
Claude Code
Add the server using the Claude CLI:
claude mcp add --transport http sonatype-mcp https://mcp.guide.sonatype.com/mcp
VS Code Copilot
Add the following configuration to your global VS Code mcp.json or create a .vscode/mcp.json file in your workspace:
{
"servers": {
"sonatype-mcp": {
"url": "https://mcp.guide.sonatype.com/mcp",
"type": "http"
}
}
}
Windsurf
Create or edit ~/.codeium/windsurf/mcp_config.json:
{
"mcpServers": {
"sonatype-mcp": {
"command": "npx",
"args": [
"mcp-remote",
"https://mcp.guide.sonatype.com/mcp"
]
}
}
}
IntelliJ with Junie
Global Scope: Go to IDE settings → Tools → Junie → MCP Settings. Click "+" and add:
Project Scope: Create .junie/mcp/.mcp.json in your project root:
{
"mcpServers": {
"sonatype-mcp": {
"command": "npx",
"args": [
"mcp-remote",
"https://mcp.guide.sonatype.com/mcp"
]
}
}
}
Kiro
Create or edit ~/.kiro/settings/mcp.json:
{
"mcpServers": {
"sonatype-mcp": {
"command": "npx",
"args": [
"mcp-remote",
"https://mcp.guide.sonatype.com/mcp"
]
}
}
}
Cursor
Cursor supports remote servers directly. Add to your ~/.cursor/mcp.json:
{
"mcpServers": {
"sonatype-mcp": {
"type": "http",
"url": "https://mcp.guide.sonatype.com/mcp"
}
}
}
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
