# Socket MCP
> Socket MCP exposes package-security scoring and Socket organization intelligence to AI clients, with an OAuth-hosted server and a self-hosted npm server option.
Canonical: https://www.mcpfolio.com/servers/socket-security
Last updated: 2026-11-02
## Catalog record

- Publisher: Socket
- Categories: Uncategorized

## Website

https://socket.dev/

## Repository

https://github.com/SocketDev/socket-mcp

## Transports

Streamable HTTP

## Authentication

Hosted server authenticates through browser-based Socket OAuth on first connection. Self-hosted server uses SOCKET_API_TOKEN; the documented minimum packages:list scope permits package metadata/dependency score lookup, while organization tools require their own endpoint scopes.

## Tools

- **depscore**: Query Socket security and quality scores for package dependencies.

## Sources

- [official_tool_reference](https://docs.socket.dev/docs/guide-to-socket-mcp)
- [official_documentation_or_source](https://docs.socket.dev/docs/remote-socket-mcp)

## Setup

Use the interactive setup panel on [the detail page](https://www.mcpfolio.com/servers/socket-security) to view instructions for each supported client.