Does Sonatype have an MCP server?
Sonatype maintains an official MCP server.
Covers Sonatype Guide dependency intelligence (versions, vulnerabilities, Trust Score), not Nexus Repository or Lifecycle administration.
- Access
- Remote server
- Endpoint
- https://mcp.guide.sonatype.com/mcp
- Repository
- sonatype/dependency-management-mcp-server
- Maintainer
- Sonatype
- Stars
- 74
- Last commit
- 9mo ago
- Category
- Developer Tools
The receipts
A remote server run by Sonatype itself — nothing to install. Documented at guide.sonatype.com.
Connect it
Hosted by the vendor — no install, connect over HTTP with OAuth or a token.
Add it from the terminal, then restart your session:
claude mcp add --transport http sonatype https://mcp.guide.sonatype.com/mcpAdd --scope user to make it available in every project.
- Open Settings → Connectors
- Click Add custom connector
- Paste
https://mcp.guide.sonatype.com/mcp - Finish the sign-in prompt, then enable it in the chat's tools menu
Add to .cursor/mcp.json in your project, or ~/.cursor/mcp.json for
every project:
{
"mcpServers": {
"sonatype": {
"url": "https://mcp.guide.sonatype.com/mcp"
}
}
}A green dot in Settings → MCP means it connected.
Add to .vscode/mcp.json:
{
"servers": {
"sonatype": {
"type": "http",
"url": "https://mcp.guide.sonatype.com/mcp"
}
}
}Then pick the server from the tools menu in Copilot's agent mode.
- Enable Developer mode under Settings → Apps & Connectors → Advanced
- Choose Create and paste
https://mcp.guide.sonatype.com/mcp - Complete sign-in, then enable the connector in a new chat
Questions
Does Sonatype have an official MCP server?
Yes. Sonatype maintains an official MCP server, hosted at https://mcp.guide.sonatype.com/mcp. The source lives at sonatype/dependency-management-mcp-server on GitHub.
How do I connect Sonatype to Claude?
Add https://mcp.guide.sonatype.com/mcp as a custom connector under Settings → Connectors in Claude Desktop or claude.ai, or run "claude mcp add --transport http sonatype https://mcp.guide.sonatype.com/mcp" in Claude Code.
Do I need to install anything to use the Sonatype MCP server?
No. It is a remote server hosted by Sonatype, so your MCP client connects to it over HTTP. You authenticate with the vendor rather than installing a package.
How is this verdict verified?
Published to the MCP Registry under Sonatype's verified namespace com.sonatype; the hosted endpoint mcp.guide.sonatype.com/mcp is documented at guide.sonatype.com/mcp and in the sonatype/dependency-management-mcp-server repo, and answers MCP initialize with 401 (personal API token required). GitHub metadata is refreshed every six hours.
How we know
Published to the MCP Registry under Sonatype's verified namespace com.sonatype; the hosted endpoint mcp.guide.sonatype.com/mcp is documented at guide.sonatype.com/mcp and in the sonatype/dependency-management-mcp-server repo, and answers MCP initialize with 401 (personal API token required).
- GitHub data refreshed on 2026-10-14, and again every six hours.
- Vendor docs checked by hand on 2026-09-29.
Spotted something out of date? Tell us — corrections ship same-day.