How do I connect Socket MCP Server to Claude?

The listing records `claude mcp add --transport http socket-mcp https://mcp.socket.dev/` as its setup step. Run it, then follow the repository's instructions for the client configuration; the listing names Claude Desktop, Claude Code, Cursor as compatible clients.

Is Socket MCP Server free?

The listed licence is MIT. Check the upstream terms for permitted use and commercial requirements; a public repository does not by itself mean the software is free or open source. Connected APIs and hosted services may have separate charges.

What can Socket MCP Server do?

Socket MCP Server documents 7 tools to the agent, including alerts, depscore, organizations. The descriptions above come from project documentation. A live handshake does not test individual tool behavior.

Socket MCP

Unclaimed

by SocketDev

Model Context Protocol server for socket.dev integration

Install

$claude mcp add --transport http socket-mcp https://mcp.socket.dev/

Set up this server

Compare servers My Stack

This server needs project-specific setup. Follow the project instructions; no reusable public launch command is available yet.

Project instructions

Is this your MCP server?

This listing was auto-indexed from the public record. Claim it to edit the page, set compatibility and unlock growth tools. Takes under two minutes.

Claim this server

Security profile

Claimed and verified servers get a weekly static scan that shows what the code can reach: external services, environment variables, shell commands, agent configuration folders, plus any dependencies with known advisories. Claim this listing to get one. How the security profile works

7 of 7 tools

Documented tools (7)

From project documentation. A server handshake does not verify each tool’s description or behavior.

alerts

List the latest security alerts for one Socket organization: supply-chain, vulnerability, quality, license, and maintenance issues across the org's monitored packages. Backed by GET /v0/orgs/{orgslug}/alerts. Results are paginated; pass the previous response's endCursor as cursor to fetch the next p

depscore

Query the Socket API for dependency scoring information. Returns supply chain, quality, maintenance, vulnerability, and license scores per package.

organizations

List the Socket organizations the authenticated user belongs to. Takes no parameters. Use it to discover the orgslug value that the org-scoped tools (alerts, threatfeed) require.

package_file_contents

Read a single file from a package. Pass the hash printed next to an entry in packagefiles output. Returns up to 1 MB of UTF-8 text; binary files return metadata only.

package_file_grep

Search a single file from a package for lines matching a JavaScript regular expression, returning matches with line numbers (grep -n style). Each blob is fetched once and held in a process-wide cache, so repeated reads and greps of the same hash skip the network.

package_files

List the files published in a package: a tree of file paths, each with its size and blob hash, for any package on a supported ecosystem. Use it to inspect what a dependency ships before installing it. Pass a file's hash to packagefilecontents or packagefilegrep.

threat_feed

Look up items in a Socket organization's threat feed: packages recently flagged as malware, typosquats, obfuscated code, and similar. Backed by GET /v0/orgs/{orgslug}/threat-feed. The response carries a nextPageCursor; pass it as cursor to page forward.

Tool change history

Compared across complete checks of the same configuration. Tools were listed, not invoked. Input-schema changes are not measured here.

No complete tool checks yet.

FAQ

Questions about Socket MCP Server

How do I connect Socket MCP Server to Claude?: The listing records `claude mcp add --transport http socket-mcp https://mcp.socket.dev/` as its setup step. Run it, then follow the repository's instructions for the client configuration; the listing names Claude Desktop, Claude Code, Cursor as compatible clients.
Is Socket MCP Server free?: The listed licence is MIT. Check the upstream terms for permitted use and commercial requirements; a public repository does not by itself mean the software is free or open source. Connected APIs and hosted services may have separate charges.
What can Socket MCP Server do?: Socket MCP Server documents 7 tools to the agent, including alerts, depscore, organizations. The descriptions above come from project documentation. A live handshake does not test individual tool behavior.