by snyk · snyk/agent-scan
Snyk's first-party scanner aimed at agent supply chain: scans MCP servers, skills, and agent code for injection patterns, leaky tool descriptions, and known-bad dependencies.
Built on Snyk's vulnerability DB, this tool extends the usual SCA pass to AI-agent-specific risks: tool description prompt injection, skill SKILL.md poisoning, weak hook patterns, and dependency CVEs.
%APPDATA%\Claude\claude_desktop_config.json{
"mcpServers": {
"snyk-agent-scan": {
"command": "uvx",
"args": [
"snyk-agent-scan"
],
"env": {
"SNYK_TOKEN": "${SNYK_TOKEN}"
}
}
}
}Open Claude Desktop → Settings → Developer → Edit Config. Restart after saving.
{
"mcpServers": {
"snyk-agent-scan": {
"command": "uvx",
"args": [
"snyk-agent-scan"
],
"env": {
"SNYK_TOKEN": "${SNYK_TOKEN}"
}
}
}
}Cursor uses the same mcpServers schema as Claude Desktop. Project config wins over global.
{
"mcpServers": {
"snyk-agent-scan": {
"command": "uvx",
"args": [
"snyk-agent-scan"
],
"env": {
"SNYK_TOKEN": "${SNYK_TOKEN}"
}
}
}
}Click the MCP Servers icon in the Cline sidebar, then "Edit Configuration".
{
"mcpServers": {
"snyk-agent-scan": {
"command": "uvx",
"args": [
"snyk-agent-scan"
],
"env": {
"SNYK_TOKEN": "${SNYK_TOKEN}"
}
}
}
}Same shape as Claude Desktop. Restart Windsurf to pick up changes.
{
"mcpServers": [
{
"name": "snyk-agent-scan",
"command": "uvx",
"args": [
"snyk-agent-scan"
]
}
]
}Continue uses an array of server objects rather than a map.
{
"context_servers": {
"snyk-agent-scan": {
"command": {
"path": "uvx",
"args": [
"snyk-agent-scan"
]
}
}
}
}Add to context_servers. Zed hot-reloads on save.
claude mcp add snyk-agent-scan -- uvx snyk-agent-scanOne-liner. Verify with claude mcp list. Remove with claude mcp remove.
When to use: You ship a custom MCP / skill and want a Snyk gate on every PR.
Outcome: Agent supply chain has the same gate as your app code.
Layer behavioural probes (Cisco) with dep + lint (Snyk)
| Tool | Inputs | When to call | Cost |
|---|---|---|---|
| scanner CLI | (see docs) | Not exposed as MCP tools — CLI scanner | 1 call |
snyk:read401Token wrong or expired — regenerate in Snyk dashboard
| Alternative | When to use it instead | Tradeoff |
|---|---|---|
| cisco-mcp-scanner | You want behavioural probes | No SCA |