MCP server · Socket

socket

Socket operates an official Model Context Protocol server. A public hosted server runs at https://mcp.socket.dev/ over HTTP with OAuth sign-in; a self-hosted stdio/HTTP build ships as npx @socketsecurity/mcp, authenticated with a Socket API token (SOCKET_API_TOKEN). Tool list captured verbatim from the socket-mcp repository documentation.

Open endpoint → Socket provider profile

One-click install for Cursor, VS Code, Claude, and 20+ other MCP clients, powered by API Commons MCP Install — visit install.apicommons.org for more information.

Provider: Socket Type: Hosted endpoint Transport: http Host: mcp.socket.dev

Endpoint

https://mcp.socket.dev

Hosted endpoint · transport http

Connect

This is a remote MCP server — point an MCP client at the endpoint URL. Clients with native remote support (Claude, Cursor, VS Code, …):

# mcp client config (e.g. .mcp.json / mcp settings) { "mcpServers": { "socket-dev": { "url": "https://mcp.socket.dev" } } }

For stdio-only clients (older Claude Desktop, etc.), bridge with mcp-remote:

# Add to claude_desktop_config.json { "mcpServers": { "socket-dev": { "command": "npx", "args": ["-y", "mcp-remote", "https://mcp.socket.dev"] } } }

If the server requires authentication, add the provider's token/header (e.g. an X-API-Key) per its docs. A quick reachability check:

curl -i -X POST https://mcp.socket.dev \ -H "Content-Type: application/json" -H "Accept: application/json, text/event-stream" \ -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Tools

depscore — Query the Socket API for dependency scoring information — supply chain, quality, maintenance, vulnerability, and license scores per package.
organizations — List the Socket organizations the authenticated user belongs to; discovers the org_slug required by organization-scoped tools.
alerts — List the latest security alerts for one Socket organization — supply-chain, vulnerability, quality, license, and maintenance issues across monitored packages.
threat_feed — Look up items in a Socket organization's threat feed — packages recently flagged as malware, typosquats, obfuscated code, and similar.
package_files — List the files published in a package — a tree of paths and sizes for any package on a supported ecosystem.
package_file_contents — Read individual files from packages; accepts blob hashes from package_files output.
package_file_grep — Search a single file from a package for lines matching a JavaScript regular expression, returning matches with line numbers.

About MCP

The Model Context Protocol (MCP) is an open protocol Anthropic introduced for connecting LLM-based agents to external tools and data sources. Providers publish MCP servers that expose their API surface as structured, discoverable tools — an MCP-compatible client (Claude Desktop, Cursor, Cline, Continue, etc.) can connect to the server and call its tools without any per-provider integration code.

Browse every MCP server on the APIs.io network or compare with the broader Agent Skill surfaces of the same providers.