# Connect the Snyk MCP server to Unblocked to give AI agents live AI security context URL: https://getunblocked.com/integrations/snyk/ Unblocked connects to Snyk’s Evo MCP server so AI coding agents can query your AI asset inventory, policies, and policy violations live — then its Context Engine reconciles what they find with the code, pull requests, and conversations behind them. --- ## Snyk integration details - **Category:** Security & Compliance - **Live-queried data:** AI assets, policies, policy violations - **Supported products:** Evo by Snyk - **Works with:** Claude Code, Cursor, Devin, GitHub Copilot, Codex, OpenCode, VS Code — via one MCP server connection - **Maintained by:** Snyk · verified by Unblocked - **Content reviewed:** October 20, 2026 - **Website:** ## What the Snyk integration adds Teams adopting AI ship models, agents, MCP servers, and skills faster than anyone can track them, and Evo by Snyk is where that inventory, the policies governing it, and the violations against those policies live. Without a connection, an agent adding a new model or MCP server has no idea whether it breaks a policy until someone checks Evo by hand. Snyk’s Evo MCP server exposes that data to AI agents, and Unblocked connects to it once so every agent can ask without its own Snyk setup. This is a third-party MCP server: Snyk hosts and maintains it, and Unblocked connects to it as a verified MCP server. Nothing is ingested or indexed — Unblocked calls the read-only Evo tools you select at the moment a question needs them, so answers reflect your AI inventory and open issues as Evo reports them now. Wiring the Evo MCP server straight into an agent gives it raw asset and issue queries. Unblocked’s Context Engine reasons across those results and your other sources — tracing a policy violation on an MCP server to the repository that uses it, the pull request that introduced it, and the Slack thread where someone asked for an exception — and returns one cited answer. Once connected, any MCP-compatible coding agent — Claude Code, Cursor, Devin, GitHub Copilot, Codex — reaches Snyk context through a single Unblocked MCP server connection. ### What you get - **Live AI inventory and policy issues** — Agents query the models, agents, MCP servers, skills, and packages Evo has discovered, along with the policies and violations attached to them, straight from Snyk’s hosted server. - **MCP allow list checks before you add a server** — Agents can look up an MCP server by name, package, or URL and read your organization’s allow list, so the question of whether a server is approved gets answered in the editor. - **Read-only, tool-level control** — Evo’s policy and allow list write tools are never offered. You choose which read tools Unblocked may call, and Snyk still enforces your Tenant role on every request. Change the selection anytime from Settings → Data Sources. - **Context Engine reasoning** — Evo results are reconciled with your code, pull requests, tickets, and conversations, so a flagged AI asset leads to the change that introduced it and the people who discussed it — with citations. ## How to connect Snyk to Unblocked Prerequisites: - An Unblocked account (free to start). - A Snyk account with access to Evo by Snyk, a Tenant role that can read Evo data, and permission to authorize Snyk’s OAuth sign-in. - An MCP-compatible coding agent (Claude Code, Cursor, Devin, etc.) to use the context in your editor. ### Step 1: Connect Snyk to Unblocked 1. In Unblocked, go to Settings → Data Sources → Connect another data source, and under Security & Compliance select Snyk. 2. The Snyk MCP server URL is filled in for you. Choose OAuth, click Connect, and sign in to Snyk to authorize Unblocked. 3. Once Unblocked discovers the server’s tools, select the read-only tools it may use and click Save Settings. ### Step 2: Install the Unblocked MCP server On macOS or Linux, one command auto-detects and configures the supported agents on your machine: ```bash curl -fsSL https://getunblocked.com/install-mcp.sh | bash ``` On Windows, or when you prefer remote MCP, add the server manually using the configuration below or follow the manual install guide: Claude Code — add the remote server, then run /mcp in Claude Code, select unblocked, and log in via OAuth: ```bash claude mcp add -s user --transport http unblocked https://getunblocked.com/api/mcpsse ``` Cursor — open View: Open MCP Settings → Add Custom MCP, add the server, then click Connect to authenticate via OAuth: ```json { "mcpServers": { "unblocked": { "url": "https://getunblocked.com/api/mcpsse" } } } ``` Any MCP-compatible client (Devin, Codex, VS Code, Claude Desktop, and others) can connect to the remote server with OAuth: `https://getunblocked.com/api/mcpsse` ## Snyk MCP server tools Snyk hosts and maintains this MCP server. Unblocked calls only the read-only tools you select, at the moment a question needs them: - **`query_assets`** — Returns AI assets and their metadata — models, agents, MCP servers, skills, prompts, datasets, packages, and more — from your Evo inventory. - **`query_related_assets`** — Returns relationships between assets, including indirect ones, such as which repositories or machines use a given model or MCP server. - **`query_policies`** — Returns policy definitions and metadata, including each policy’s conditions and whether it is a Snyk default or a custom policy. - **`query_issues`** — Returns policy violations, with the violating asset and the location where it was found. - **`find_approvable_mcp_servers`** — Looks up MCP servers by name, package name, or URL, covering servers detected in your environment and known servers in Snyk’s catalogue. - **`get_mcp_server_allow_list`** — Returns your organization’s current MCP server allow list. ## Connect Snyk to Claude Code, Cursor, and other AI agents To give Claude Code, Cursor, GitHub Copilot, Codex, or another MCP-compatible AI coding agent access to Snyk context, connect Snyk to Unblocked and add the single Unblocked MCP server to your agent. Unblocked acts as the MCP context layer for your Snyk data, searching AI assets, policies, and policy violations alongside your other connected sources and returning cited results through these tools: - **`context_research`** — Researches a question across your connected sources and calls the Snyk Evo tools you selected when AI assets, policies, or policy violations are relevant, returning a synthesized answer with citations. - **`context_get_urls`** — Fetches the full content behind URLs your agent encounters across connected sources — Jira, Linear, Notion, Confluence, Slack, GitHub, and more. ## Questions to ask an AI agent about Snyk Questions you (or your agent) can ask Unblocked about your Snyk data: - "Is the MCP server this pull request adds on our allow list, and has anyone asked for it in Slack?" - "Which open Evo issues involve models used in the payments repository, and who introduced them?" - "What does our policy on unapproved model providers say, and which recent changes would break it?" - "Which agents and skills did Evo find on developer machines, and is there a ticket tracking their review?" ## Snyk integration FAQ ### What is the Snyk MCP server? The Snyk MCP server Unblocked connects to is the Evo MCP server, a remote Model Context Protocol server hosted and maintained by Snyk that gives AI agents access to Evo by Snyk — your AI asset inventory, risk data, policies, policy violations, and MCP server allow list. Unblocked connects to it as a verified MCP server, so every agent reaches it through one Unblocked connection. ### Is this the same as the Snyk CLI MCP server that runs code scans? No. Snyk also ships a CLI-based MCP server that runs scans locally from your machine. Unblocked connects to the hosted Evo MCP server, which answers questions about your AI inventory, policies, and issues rather than running scans. ### Can Unblocked create or change my Evo policies or MCP allow list? No. Evo’s write tools — creating and updating policies and editing the MCP server allow list — are excluded, and only read-only tools are available for selection. Snyk still checks your Tenant role on every request. ### Which Evo data can agents query through Unblocked? Agents can query discovered AI assets and how they relate, policy definitions, policy violations with their locations, known MCP servers, and your current MCP server allow list — limited to the read tools you select. ### Does Unblocked index my Snyk Evo inventory or issues? No. Nothing from Evo is ingested or indexed. Unblocked calls the Evo MCP server while it answers a question, so results reflect your AI inventory and policy issues at that moment. ## Related integrations - [GitHub](https://getunblocked.com/integrations/github/) — Repositories, pull requests, issues, discussions, and full code history — indexed, kept in sync on every push, and cited in answers. - [Jira](https://getunblocked.com/integrations/jira/) — Issues and projects from Jira Cloud and Data Center — with sprint-aware answers that connect tickets to the code and PRs behind them. - [Slack](https://getunblocked.com/integrations/slack/) — Public and private channels and threads — indexed with access permissions respected, plus in-Slack Q&A by @mentioning Unblocked. - [Vanta](https://getunblocked.com/integrations/vanta/) — Compliance and security context from Vanta’s verified MCP server, queried live while Unblocked answers — nothing is ingested or indexed. ## Get started with Unblocked - Start a free trial: - Pricing: - All integrations: