Dependency Management MCP Server

by sonatype Your server? Claim it

answering

Dependency Management MCP Server is answering right now. Last checked 13 min ago. It exposes 3 tools. Last commit 15 Jan 2026.

Sonatype component intelligence: versions, security analysis, and Trust Score recommendations

Uptime history 47 days of history

47 days agonow

100.0%

Uptime 24h

91 of 91 checks

Tools

read from the server

439 ms

Response time

average over 24h

Stars

last commit 15 Jan 2026

Nothing serious here today

Today is the operative word: we check Dependency Management MCP Server every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 13 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add dependency-management-mcp-server --transport http https://mcp.guide.sonatype.com/mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "dependency-management-mcp-server": {
      "url": "https://mcp.guide.sonatype.com/mcp"
    }
  }
}

~/.codex/config.toml

[mcp_servers.dependency-management-mcp-server]
url = "https://mcp.guide.sonatype.com/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "dependency-management-mcp-server": {
      "url": "https://mcp.guide.sonatype.com/mcp"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "dependency-management-mcp-server": {
      "url": "https://mcp.guide.sonatype.com/mcp"
    }
  }
}

This endpoint answered with an authorization challenge. The server is running, but you need an API key from its owner to call it.

Available tools 3

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

getcomponentversion

getComponentVersion

Returns detailed analysis of a specific dependency or multiple dependencies with metadata about quality, license and security. Dependencies can be referred to as packages, components or libraries. They can be transitive (brought in by other dependencies) or direct (explicitly added to the project).

getlatestcomponentversion

getLatestComponentVersion

Returns the latest version of a dependency or multiple dependencies with quality, license and security data. Dependencies can be referred to as packages, components or libraries. They can be transitive (brought in by other dependencies) or direct (explicitly added to the project).

getrecommendedcomponentversions

getRecommendedComponentVersions

Returns top dependency version recommendations ranked by Developer Trust Score with security, licensing, and quality analysis. Developer Trust Score is a measure of quality, security, licensing, and maintainability. Use this when selecting a new component to add to a project (without version) or when upgrading an existing component (with version). Dependencies can be referred to as packages, components or libraries. They can be transitive (brought in by other dependencies) or direct (explicitly added to the project).

Endpoints

URL	Transport	State	Latency	Checked
https://mcp.guide.sonatype.com/mcp	streamable-http	needs key	455 ms	13 min ago

Alternatives to Dependency Management MCP Server

same job, measured the same way

Repository Intelligence

by nirholas

Analyze repos of any size - security scanning code analysis monorepo support

local only

Guava Wallet Intelligence

by guava-research

Crypto security, honeypot detection, wallet analysis, and token risk scoring across 31 blockchains.

659 installs/wk answering

npm Registry MCP Server

by yawlabs

npm registry MCP server — package intelligence, security audits, dependency analysis

1 290 installs/wk local only

Nekzus npm Sentinel MCP

by smithery

Provide AI-powered real-time analysis and intelligence on NPM packages, including security, depend…

answering

ArchGraph

by archgraph

Code intelligence platform for AI agents. 20 tools for architecture, security & impact analysis.

answering

UML Forge

by dave1362

Architecture intelligence, security analysis, and living docs. 14 Mermaid tools.

709 installs/wk local only

Stobox Intelligence & Tokenization

by stobox

Verified RWA tokenization knowledge — security tokens, regulation, standards — for any AI.

6 tools answering

Security Recipes

by stevologic

Read-only CVE intelligence, remediation playbooks, and agent setup guides. Not a scanner.

75 tools answering

Dependency Management MCP Server — questions

Answers built from our own checks of this server.

What can Dependency Management MCP Server do?

It exposes 3 tools, read directly from the server on our last check. Among them: getComponentVersion, getLatestComponentVersion, getRecommendedComponentVersions. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is Dependency Management MCP Server working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 439 ms. The bar chart above shows every period we have measured.

How do I connect Dependency Management MCP Server?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address. You will need your own key: it refuses anonymous clients.

Does Dependency Management MCP Server need an API key?

Yes. Every time we knock, Dependency Management MCP Server answers with an authorization challenge instead of its tool list — that is how we know it is running and gated rather than broken. Bring your own credentials and it will talk.

How fast is Dependency Management MCP Server?

It answers our handshake in 439 ms on average, which is faster than 34% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.

Is Dependency Management MCP Server open source?

We cannot say either way: 74 stars on GitHub and 1 open issue, but we could not determine the licence, and without one the code is not open source by default.