socket-mcp
Model Context Protocol server for socket.dev integration
Install / Use
claude mcp add SocketDev -- npx -y github:SocketDev/socket-mcpIf the server publishes to npm under a different name, use that package instead — check the repo README.
MCP Server
Model Context Protocol server
Quality Score
Category
SecuritySupported Platforms
Our assessment of socket-mcp
socket-mcp scores 42/100 on our quality scale, 1103rd of 1,113 Security skills we index.
Its MCP Server is 8.4 KB long, written without headings and no code examples: a thorough specification that gives an agent plenty to work with.
It has no GitHub stars yet, so there is no community track record; judge it on its content.
Maintenance, license and trust
- We could not determine when the repository was last updated.
- Our last check on 2026-08-30 found the source still online.
- No license is declared. By default that means all rights are reserved: you can read it, but reusing or redistributing it is not clearly permitted. Ask the author before building on it commercially.
- Its trust signals score 68/100, with 3 cautions from licensing, adoption, age or documentation. These come from repository metadata, not a code audit — read the skill file before letting an agent act on it.
Safety scan
No issues foundOur scan of the whole file found no instruction hijacking, hidden characters, credential access, data exfiltration or destructive commands. An AI review of the same text found nothing harmful.
AI review by kimi-k2.7-code on 2026-10-27. Automated pattern scan on 2026-10-26. It catches known dangerous patterns, not every risk — read a skill before letting an agent act on it.
socket-mcp compared with similar skills
All 4 of these similar skills score higher than socket-mcp; compare them before choosing.
| Skill | Score | Stars | Updated | Format |
|---|---|---|---|---|
| socket-mcp (this skill)by SocketDev | 42 | 0 | — | MCP Server |
| Agent-Reachby Panniantong | 100 | 105.5k | 3d ago | CLAUDE.md |
| headroomby headroomlabs-ai | 100 | 78.1k | today | CLAUDE.md |
| CowAgentby zhayujie | 100 | 47.7k | today | CLAUDE.md |
| Scraplingby D4Vinci | 100 | 90.2k | today | MCP Server |
Frequently asked questions
- How do I install socket-mcp?
- Run
claude mcp add SocketDev -- npx -y github:SocketDev/socket-mcp. The install tabs above show the steps for each supported agent. - Which AI agents does socket-mcp work with?
- It is written for Claude Code and Claude Desktop, as a MCP Server file. Other agents that read the same format can often use it too.
- Is socket-mcp safe to use?
- Our scan of the whole file found no instruction hijacking, hidden characters, credential access, data exfiltration or destructive commands. An AI review of the same text found nothing harmful. It declares no license and scores 68/100 on trust signals. Skills are instructions an agent will follow, so read the file before installing it and do not approve commands you do not understand.
- Is socket-mcp still maintained?
- We could not determine when the repository was last updated.
Skill content
View source on GitHub{ "name": "@socketsecurity/mcp", "version": "0.0.20", "description": "Socket MCP server for scanning dependencies", "keywords": [], "homepage": "https://github.com/SocketDev/socket-mcp#readme", "bugs": { "url": "https://github.com/SocketDev/socket-mcp/issues" }, "author": "Alexandros Kapravelos", "repository": { "type": "git", "url": "https://github.com/SocketDev/socket-mcp" }, "bin": { "socket-mcp": "./dist/index.cjs" }, "files": [ "CHANGELOG.md", "dist/index.cjs", "dist/socket-gate", "package.json" ], "type": "module", "main": "./dist/index.cjs", "publishConfig": { "access": "public", "provenance": true }, "scripts": { "prepare": "node scripts/repo/bootstrap/prepare.mts && node scripts/fleet/install-git-hooks.mts && node scripts/fleet/prepare.mts", "prepublishOnly": "echo 'ERROR: Use GitHub Actions workflow for publishing' && exit 1", "postpublish": "pnpm run clean", "npm:publish": "node scripts/fleet/publish-pipeline.mts", "test": "node scripts/fleet/test.mts", "test:e2e": "vitest run --config .config/repo/vitest.config.mts test/e2e/", "test:fuzz": "node scripts/repo/fuzz.mts", "cover": "node scripts/fleet/cover.mts", "test:tsc": "tsgo --noEmit -p tsconfig.json", "lint": "node scripts/fleet/lint.mts", "lint:all": "node scripts/fleet/lint.mts --all", "format": "node scripts/fleet/format.mts", "format:check": "node scripts/fleet/format.mts --check", "check": "node scripts/fleet/check.mts", "check:all": "node scripts/fleet/check.mts --all", "fix": "node scripts/fleet/fix.mts", "fix:all": "node scripts/fleet/fix.mts --all", "update": "node scripts/fleet/update.mts", "build": "pnpm run clean && pnpm run build:bundle && pnpm run build:permissions", "build:bundle": "node scripts/repo/build.mts", "build:permissions": "chmod +x ./dist/index.cjs", "build-mcpb": "pnpm run build && pnpm run build-mcpb:versions_match && pnpm run build-mcpb:validate && pnpm run build-mcpb:ensure-deps && pnpm run build-mcpb:mcpb-pack", "build-mcpb:versions_match": "node scripts/repo/check-versions.ts", "build-mcpb:validate": "mcpb validate ./", "build-mcpb:ensure-deps": "npm install --production --ignore-scripts", "build-mcpb:mcpb-pack": "mcpb pack ./", "clean": "node scripts/fleet/clean.mts", "debug-stdio": "node ./mock-client/debug-client.ts", "debug-sdk": "node ./mock-client/stdio-client.ts", "debug-http": "node ./mock-client/http-client.ts", "server-stdio": "SOCKET_API_TOKEN=${SOCKET_API_TOKEN:-${SOCKET_API_KEY}} node ./index.ts", "server-stdio:debug": "SOCKET_DEBUG=1 SOCKET_API_TOKEN=${SOCKET_API_TOKEN:-${SOCKET_API_KEY}} node ./index.ts", "server-http": "MCP_HTTP_MODE=true SOCKET_API_TOKEN=${SOCKET_API_TOKEN:-${SOCKET_API_KEY}} node ./index.ts", "server-http:debug": "SOCKET_DEBUG=1 MCP_HTTP_MODE=true SOCKET_API_TOKEN=${SOCKET_API_TOKEN:-${SOCKET_API_KEY}} node ./index.ts", "check:paths": "node scripts/fleet/check/paths-are-canonical.mts", "security": "node scripts/fleet/security.mts", "setup-security-tools": "node .claude/hooks/fleet/setup-security-tools/install.mts", "lockstep": "node scripts/fleet/lockstep.mts", "lockstep:emit-schema": "node scripts/fleet/lockstep-emit-schema.mts", "lockstep:emit-mirror-globs": "node scripts/fleet/lockstep-emit-mirror-globs.mts", "ci:local": "node scripts/fleet/local-ci-skip-locks.mts run --all --quiet --pause-on-failure --github-token", "weekly-update": "node scripts/fleet/weekly-update.mts", "doctor:auth": "node scripts/fleet/check/setup-is-prompt-less.mts", "sync-oxlint-rules": "node scripts/fleet/sync-oxlint-rules.mts", "sync-package-manager-pins": "node scripts/fleet/sync-package-manager-pins.mts", "doctor": "node scripts/fleet/doctor.mts", "setup:brew": "node scripts/fleet/setup/brew.mts", "setup:go": "node scripts/fleet/setup/go.mts", "setup:python": "node scripts/fleet/setup/python.mts", "setup:refero": "node scripts/fleet/setup/refero.mts", "setup:rust": "node scripts/fleet/setup/rust.mts", "type": "node node_modules/typescript/bin/tsc --noEmit -p .config/fleet/tsconfig.check.json", "socket-wheelhouse:emit-schema": "node scripts/fleet/socket-wheelhouse-emit-schema.mts", "mcp:reset": "node scripts/fleet/mcp-reset.mts", "setup:sfw-ca": "node scripts/fleet/setup/sfw-ca.mts", "get-green": "node scripts/fleet/get-green.mts", "weekly-update:ci": "gh workflow run weekly-update.yml", "prune:backups": "node scripts/fleet/backup-branches.mts prune", "strip:ai-tags": "node scripts/fleet/strip-ai-tags.mts", "npm:approve": "node scripts/fleet/publish-pipeline.mts --approve", "npm:auth": "node scripts/fleet/npm-auth.mts", "npm:dispatch": "gh workflow run npm-publish-packages.yml -R SocketDev/socket-registry --ref main -f publish=true", "npm:staged": "node scripts/fleet/publish-pipeline.mts --status", "hide-comments": "node scripts/fleet/hide-comments.mts", "ruleset:bypass": "node scripts/fleet/grant-ruleset-bypass.mts", "soak:bypass": "node scripts/fleet/soak-bypass.mts", "npm:trust": "node scripts/fleet/registry-infra/npm/trust.mts", "prune:branch-backups": "node scripts/fleet/backup-branches.mts prune", "preflight": "node scripts/fleet/preflight.mts", "npm:auth:browser": "node scripts/fleet/npm-auth-browser.mts", "npm:auth:cli": "node scripts/fleet/npm-auth-cli.mts", "prune:gha-caches": "node scripts/fleet/prune-actions-caches.mts", "check:fleet": "node scripts/fleet/check.mts", "fix:js": "node scripts/fleet/fix.mts --js", "fix:repo": "node scripts/fleet/fix.mts --repo", "fmt:js": "node scripts/fleet/format.mts", "lint:js": "node scripts/fleet/lint.mts", "gh:auth": "node scripts/fleet/gh-auth.mts", "sync-global-hooks": "node scripts/fleet/sync-global-hooks.mts", "backup": "node scripts/fleet/backup-work.mts", "offload:model": "node scripts/fleet/offload-model.mts", "setup:fireconnect": "node scripts/fleet/setup/fireconnect.mts", "setup:offload-providers": "node scripts/fleet/setup/offload-providers.mts" }, "devDependencies": { "@anthropic-ai/mcpb": "catalog:", "@mdn/browser-compat-data": "catalog:", "@modelcontextprotocol/client": "2.0.0", "@modelcontextprotocol/core": "2.0.0", "@modelcontextprotocol/node": "2.0.0", "@modelcontextprotocol/server": "2.0.0", "@playwright/mcp": "catalog:", "@shadscan/cli": "catalog:", "@sinclair/typebox": "catalog:", "@socketregistry/packageurl-js": "catalog:", "@socketregistry/packageurl-js-stable": "catalog:", "@socketsecurity/lib": "catalog:", "@socketsecurity/lib-stable": "catalog:", "@socketsecurity/sdk": "catalog:", "@socketsecurity/sdk-stable": "catalog:", "@types/mdast": "catalog:", "@types/node": "catalog:", "@types/semver": "catalog:", "@types/shell-quote": "catalog:", "@typescript/native-preview": "catalog:", "@ultrathink/acorn.rs.wasm": "catalog:", "@vitest/coverage-v8": "catalog:", "@vitest/ui": "catalog:", "@vitiate/core": "catalog:", "c8": "catalog:", "chrome-devtools-mcp": "catalog:", "fast-check": "catalog:", "magic-string": "catalog:", "markdownlint-cli2": "catalog:", "mdast-util-from-markdown": "catalog:", "mdast-util-gfm": "catalog:", "mdast-util-to-markdown": "catalog:", "micromark": "catalog:", "micromark-extension-gfm": "catalog:", "neosanitize": "catalog:", "nock": "catalog:", "npm-high-impact": "catalog:", "oxfmt": "catalog:", "oxlint": "catalog:", "oxlint-tsgolint": "catalog:", "parse5": "catalog:", "playwright-core": "catalog:", "portless": "catalog:", "regjsparser": "catalog:", "rolldown": "catalog:", "run-local-ci": "catalog:", "semver": "catalog:", "shell-quote": "catalog:", "svgo": "catalog:", "taze": "catalog:", "typebox": "catalog:", "typescript": "catalog:", "untracked": "catalog:", "vitest": "catalog:", "vitiate": "catalog:", "yaml": "catalog:" }, "devEngines": { "packageManager": { "name": "pnpm", "version": ">=11.0.0 <12.0.0", "onFail": "error" } }, "engines": { "node": ">=24", "npm": ">=12.0.2", "pnpm": ">=11.0.5" }, "allowScripts": { "cpu-features": false, "esbuild": true, "protobufjs": false, "puppeteer": false, "ssh2": false } }
Related Skills
Agent-Reach
105.5kGive your AI agent eyes to see the entire internet. Read & search Twitter, Reddit, YouTube, GitHub, Bilibili, XiaoHongShu — one CLI, zero API fees.
headroom
78.1kCompress tool outputs, logs, files, and RAG chunks before they reach the LLM. 20% fewer tokens for coding agents, 60-95% fewer tokens for JSON, same answers. Library, proxy, MCP server.
CowAgent
47.7kOpen-source personal AI assistant & Agent Harness. Plans tasks, runs tools and skills, self-evolves with memory and knowledge. Multi-agent, multi-model, multi-channel. Lightweight, extensible, one-line install.
Scrapling
90.2k🕷️ The BEST Web Scraping framework that handles everything from a single request to a full-scale crawl! Don't be shy, join here: https://discord.gg/EMgGbDceNQ and follow here for daily tips and tricks: https://x.com/Scrapling_dev
Trust signals
From repository metadata: license, adoption, age and documentation. Not a code audit — see the Safety scan above for what the skill file itself contains.