Skip to directory

Sonatype Guide MCP

Sonatype

Transport not documented3 documented tools5

About Sonatype Guide MCP

Sonatype Guide's hosted MCP provides component-version research, vulnerability intelligence and dependency upgrade recommendations in MCP-aware coding assistants.

What you can use it for

  • Review vulnerability and license intelligence for a component version
  • Find the latest component version
  • Compare safe recommended upgrades using Sonatype intelligence
Connection and setup
Hosting
remote
Transport
Not documented
Endpoint
https://mcp.guide.sonatype.com/mcp
Authentication
Bearer token authentication using a personal API token generated in a Sonatype Guide account. Do not paste tokens into chat or commit them in client configuration.

Requirements

  • Sonatype Guide account and personal API token
  • MCP-compatible client supporting remote HTTP; clients without native remote support may require the documented mcp-remote bridge
  • Potential plan/usage limits depend on Guide account; verify in account UI

Setup steps

  1. Create a Sonatype Guide personal API token through the User Tokens menu.
  2. Add remote endpoint https://mcp.guide.sonatype.com/mcp with HTTP transport and Authorization: Bearer <token>. Store the token in secure client secret storage or environment-backed configuration.
  3. Codex CLI: codex mcp add sonatype-mcp --url https://mcp.guide.sonatype.com/mcp --bearer-token-env-var SONATYPE_GUIDE_MCP_TOKEN.
  4. Claude Code: claude mcp add sonatype-mcp https://mcp.guide.sonatype.com/mcp --transport http --scope user --header "Authorization: Bearer <token>".
  5. Cursor and VS Code have direct HTTP configurations in the official setup guide; other clients may use mcp-remote as documented.
  6. Verify with a harmless request for the latest version of a common library or component security details.
Tools 3

Sonatype’s current official Guide MCP reference documents exactly these three hosted Guide tools. A separate self-hosted AI Developer/IQ Server MCP exists and is a different product/endpoint; it is not combined here.

  • getComponentVersion

    Retrieve component-version details including release date, license, known vulnerabilities and dependency relationships.

    01
  • getLatestComponentVersion

    Find the latest available release of a component.

    02
  • getRecommendedComponentVersions

    Retrieve curated upgrade options based on Sonatype intelligence and policies.

    03
Limitations and notes
  • This hosted Guide MCP is separate from Sonatype AI Developer's self-hosted IQ Server MCP endpoint; those deployment paths and tool sets are not combined here. Account plan/usage quotas may affect access and are not specified in the public MCP setup page.
Source discrepancies
  • Sonatype also documents a separate self-hosted AI Developer/IQ Server MCP with a different URL and authentication. This record is specifically the hosted Sonatype Guide MCP endpoint, not the self-hosted server.
Original sources
  • official complete tool reference

    Current Sonatype Guide docs enumerate the three hosted Guide MCP tools and describe their component intelligence behavior.

  • official setup guide

    Official setup reference documents hosted endpoint https://mcp.guide.sonatype.com/mcp and bearer-token authentication.

Documentation checked 2026-10-28T14:10:00.000Z. Connection has not been runtime tested.

Similar tools