MCPVault

Socket MCP

Unclaimed

by SocketDev

Model Context Protocol server for socket.dev integration

Install

$claude mcp add --transport http socket-mcp https://mcp.socket.dev/

Unclaimed listing

Is this your MCP server?

This listing was auto-indexed from the public record. Claim it to edit the page, set compatibility and unlock growth tools. Takes under two minutes.

Claim this server

Tools (36)

alert_type

String

alerts

List the latest security alerts for one Socket organization: supply-chain, vulnerability, quality, license, and maintenance issues across the org's monitored packages. Backed by GET /v0/orgs/{orgslug}/alerts. Results are paginated; pass the previous response's endCursor as cursor to fetch the next p

artifact_name

String

artifact_type

String

artifactId

String

caseInsensitive

Boolean

category

String

contextLines

Integer

created_after

String

cursor

String

depname

String

depscore

Query the Socket API for dependency scoring information. Returns supply chain, quality, maintenance, vulnerability, and license scores per package.

direction

String

ecosystem

String

filter

String

hash

String

is_human_reviewed

Boolean

maxMatches

Integer

name

String

org_slug

String

organizations

List the Socket organizations the authenticated user belongs to. Takes no parameters. Use it to discover the orgslug value that the org-scoped tools (alerts, threatfeed) require.

package_file_contents

Read a single file from a package. Pass the hash printed next to an entry in packagefiles output. Returns up to 1 MB of UTF-8 text; binary files return metadata only.

package_file_grep

Search a single file from a package for lines matching a JavaScript regular expression, returning matches with line numbers (grep -n style). Each blob is fetched once and held in a process-wide cache, so repeated reads and greps of the same hash skip the network.

package_files

List the files published in a package: a tree of file paths, each with its size and blob hash, for any package on a supported ecosystem. Use it to inspect what a dependency ships before installing it. Pass a file's hash to packagefilecontents or packagefilegrep.

packages

Array

path

String

pattern

String

per_page

Integer

platform

String

repo_slug

String

severity

String

sort

String

status

String

threat_feed

Look up items in a Socket organization's threat feed: packages recently flagged as malware, typosquats, obfuscated code, and similar. Backed by GET /v0/orgs/{orgslug}/threat-feed. The response carries a nextPageCursor; pass it as cursor to page forward.

updated_after

String

version

String