Socket MCP Server
A Model Context Protocol server that lets an AI assistant query Socket's dependency security scores to check a package, audit a package.json or identify risky dependencies across npm, PyPI, Cargo and other ecosystems, hosted or self-run locally.
Socket MCP lets AI assistants such as Claude, VS Code Copilot and Cursor query Socket's dependency security scores and metadata through the Model Context Protocol, to score a package, audit a package.json, or identify risky dependencies during a conversation, batching multiple dependency checks into a single request.
The recommended setup connects an MCP client to a public hosted server, authenticating once through OAuth with no API key to manage; it can also be run locally over stdio or HTTP as an npm package. Installation is documented for VS Code, Cursor, Claude Desktop and Claude Code, including a one-line command-line install and manual JSON configuration for a client's MCP settings file, and organizations on team or enterprise plans add the hosted connector centrally before individual members enable it.
The project describes itself as in early development and rapidly evolving.