|
| 1 | +{ |
| 2 | + "$schema": "../schemas/server-definition.schema.json", |
| 3 | + "id": "com.socket-mcp-npx", |
| 4 | + "name": "Socket (npx)", |
| 5 | + "alias": "socket", |
| 6 | + "description": "Query Socket.dev for dependency security scores, supply-chain risk, malware/typosquat threat feeds, and package metadata across npm, PyPI, Cargo, Maven, NuGet, RubyGems, Go, and more. Runs locally via npx.", |
| 7 | + "logo": "https://avatars.githubusercontent.com/u/69326764?v=4", |
| 8 | + "schema_version": "2.1", |
| 9 | + "categories": [ |
| 10 | + "security", |
| 11 | + "developer-tools" |
| 12 | + ], |
| 13 | + "tags": [ |
| 14 | + "socket", |
| 15 | + "security", |
| 16 | + "dependencies", |
| 17 | + "supply-chain", |
| 18 | + "vulnerabilities", |
| 19 | + "sca" |
| 20 | + ], |
| 21 | + "transport": { |
| 22 | + "type": "stdio", |
| 23 | + "command": "npx", |
| 24 | + "args": [ |
| 25 | + "-y", |
| 26 | + "@socketsecurity/mcp" |
| 27 | + ], |
| 28 | + "env": { |
| 29 | + "SOCKET_API_TOKEN": "${input:SOCKET_API_TOKEN}" |
| 30 | + }, |
| 31 | + "metadata": { |
| 32 | + "inputs": [ |
| 33 | + { |
| 34 | + "id": "SOCKET_API_TOKEN", |
| 35 | + "label": "Socket API Token", |
| 36 | + "description": "Socket.dev API token used to query dependency scores and security data. Only the 'packages:list' permission scope is required.", |
| 37 | + "type": "text", |
| 38 | + "required": true, |
| 39 | + "secret": true, |
| 40 | + "placeholder": "sktsec_****************************", |
| 41 | + "obtain": { |
| 42 | + "url": "https://socket.dev/dashboard/org/gh/settings/api-tokens", |
| 43 | + "instructions": "1. Sign in at https://socket.dev\n2. Go to your organization Settings > API Tokens\n3. Click 'New API Token'\n4. Grant the 'packages:list' scope\n5. Create and copy the token", |
| 44 | + "button_label": "Create API Token" |
| 45 | + } |
| 46 | + } |
| 47 | + ] |
| 48 | + } |
| 49 | + }, |
| 50 | + "auth": { |
| 51 | + "type": "api_key", |
| 52 | + "instructions": "Create a Socket API token at https://socket.dev (Settings > API Tokens) with the 'packages:list' scope and set it as SOCKET_API_TOKEN." |
| 53 | + }, |
| 54 | + "contributor": { |
| 55 | + "name": "Socket", |
| 56 | + "github": "SocketDev", |
| 57 | + "url": "https://socket.dev" |
| 58 | + }, |
| 59 | + "links": { |
| 60 | + "repository": "https://github.com/SocketDev/socket-mcp", |
| 61 | + "homepage": "https://socket.dev", |
| 62 | + "documentation": "https://docs.socket.dev/docs/local-socket-mcp" |
| 63 | + }, |
| 64 | + "platforms": [ |
| 65 | + "all" |
| 66 | + ], |
| 67 | + "capabilities": { |
| 68 | + "tools": true, |
| 69 | + "resources": false, |
| 70 | + "prompts": false, |
| 71 | + "read_only_mode": false |
| 72 | + }, |
| 73 | + "changelog_url": "https://github.com/SocketDev/socket-mcp/releases" |
| 74 | +} |
0 commit comments