Same category · Developer tools
Socket Security MCP
by SocketDev · SocketDev/socket-mcp
Inspect dependency risk and package metadata using Socket’s hosted or local MCP server.
Install from the author’s instructions
Before connecting
- Choose an MCP client with HTTP and OAuth support for the hosted service.
- Sign in to Socket when your client opens the authorization flow.
Author README · MCP setup
claude mcp add --transport http socket-mcp https://mcp.socket.dev/Sources: Author README · Checked 2026-10-18.
The example registers the hosted service. Local package and transport options are documented separately in the README.
Sources: Author README · Checked 2026-10-18.
Tools and capabilities
| Capability | What it does |
|---|---|
| Dependency assessment | Retrieve Socket security scores and metadata for supported package ecosystems. |
| Manifest review | Audit package manifests and check multiple dependencies in a conversation. |
Sources: Author README · Checked 2026-10-18.
Workflow examples
Suggested prompts for your own client. These are examples, not recorded tool executions.
Prompt 1
Review the dependencies in my package manifest and identify packages that deserve manual security review, explaining the evidence.Prompt 2
Compare the security signals for two candidate dependencies and list unresolved questions before recommending either.Sources and verification
Publisher-owned documentation and public GitHub metadata reviewed on 2026-10-18. Author installation examples are retained as documented. Prompts are illustrative; no third-party package or MCP was installed or executed, and no account was connected.
Recent activity refers to the repository push timestamp. It does not establish the product’s original release date. Stars are a dated snapshot of the entire repository.
- GitHub repository metadataVerified 2026-10-18
- Author READMEVerified 2026-10-18