Developer · Remote MCP server
Dependency Management MCP Server
Sonatype component intelligence: versions, security analysis, and Trust Score recommendations.
What the MCP Registry states
The entry as published to the official MCP Registry (read 2026-10-04), latest version.
- Registry name
com.sonatype/dependency-management-mcp-server- Version
- 1.0.2
- Status
- Active
- Category
- developer
- Transport
- Streamable HTTP
- Published
- 2025-11-22
- Updated
- 2025-11-22
- Publisher
- com.sonatype
- Repository
- github.com/sonatype/dependency-management-mcp-server
- Source
- Registry API entry
Remote endpoints
| Transport | URL | Headers declared |
|---|---|---|
| Streamable HTTP | https://mcp.guide.sonatype.com/mcp | None |
How to connect Dependency Management MCP Server
Dependency Management MCP Server is a remote MCP server: there is nothing to install. Its endpoint is https://mcp.guide.sonatype.com/mcp, served over Streamable HTTP. In an assistant that accepts remote MCP servers (often under a setting named connectors, integrations or tools), add a new server and give it this URL; in a client configured by file, add it as a remote (HTTP) server with the same URL.
No headers are declared in the registry entry. If the server needs you to sign in, a client that supports MCP authorization opens the service's own sign-in page when it first connects.
Derived from the registry entry, not tested here. What the server does, and on what terms, is set by its publisher; check its repository or website before giving it access to your accounts or files. How to add an MCP server to an assistant · Before you connect
More developer servers
| Server | Runs |
|---|---|
| Dep OraclePredictive dependency security engine. Trust scores, zombie detection, blast radius analysis. | Local · stdio |
| Dep ScopeSymbol-level npm dependency analysis: scan verdicts, native alternatives, migration prompts. | Local · stdio |
| Dependency AuditorCVE scanning for npm/pip/cargo dependencies via OSV. | Local · stdio |
| Dependency Freshness MCPNpm & PyPI freshness for AI agents: latest version, deprecations, dated breaking-change diffs. | Remote · HTTP |
| Dependency MCPMCP server for checking package versions across multiple package managers. | Local · stdio |
| Dependency Vulnerability Tracker — package security advisories ($0.01/query)Dependency vulns & malicious-package advisories. Register in-session — free testnet funds. | Remote · HTTP |
| DepFeedChange intelligence for coding agents: sourced breaking changes for npm, PyPI, and Rust packages. | Remote · HTTP |
| DeployDeploy any app to any cloud. 20 tools for deployments, previews, and management. | Local · stdio |