Contact salesTry Claude

Sonatype Guide

Sonatype Guide MCP server for software supply chain intelligence and dependency security analysis. Scan dependencies for vulnerabilities, get version recommendations, and check component quality metrics.

  • Install in
  • Plugin sourceView source
  • Installs7,484

Sonatype Guide connects Claude Code to Sonatype's software supply chain intelligence platform via MCP. It lets you scan your project's dependencies for known vulnerabilities, get secure version recommendations, and evaluate open-source components based on security, licensing, and quality metrics — all without leaving your editor.

The plugin connects to Sonatype's hosted MCP server, providing access to their comprehensive component database. It authenticates using an API token from guide.sonatype.com, set via the SONATYPE_GUIDE_TOKEN environment variable.

How to use: After installing and setting your API token, try prompts like: "What vulnerabilities exist in log4j 2.14.0?", "Scan my package.json for vulnerable dependencies", "What's the most secure version of lodash?", or "Evaluate the quality and licensing of this npm package".

Other plugins

Frontend Design

Frontend design skill for UI/UX implementation

Superpowers

Core skills library for Claude Code: TDD, debugging, collaboration patterns, and proven techniques

Code Review

Automated code review for pull requests using multiple specialized agents with confidence-based scoring

Context7

Upstash Context7 MCP server for up-to-date documentation lookup. Connects to Context7's hosted remote MCP server (https://mcp.context7.com/mcp) — no local Node.js or npx required — to pull version-specific documentation and code examples directly from source repositories into your LLM context. Authenticate with Context7 when prompted.

Code Simplifier

Agent that simplifies and refines code for clarity, consistency, and maintainability while preserving functionality

Playwright

Browser automation and end-to-end testing MCP server by Microsoft. Enables Claude to interact with web pages, take screenshots, fill forms, click elements, and perform automated browser testing workflows.