dependency-management-mcp-server

Our take

Sonatype's official MCP server, connecting assistants to its dependency-intelligence platform: vulnerability scanning, license compliance checks, version selection, and remediation guidance drawn from the same data behind Nexus and OSS Index. It runs as a remote hosted server, so the repo is essentially setup documentation — the stars and code tell you little about the service itself. Requires a free personal token from guide.sonatype.com. Most valuable to teams already in the Maven/Sonatype orbit who want supply-chain checks inside the coding loop rather than at CI time.

reviewed by hand · 2026-07-05

Something wrong or dead here? Report it

Verification record

last verified

yesterday

github stars

72

last commit

6 mo ago

archived

no

in registry since

2025-11-22

github.com/sonatype/dependency-management-mcp-server