dependency-management-mcp-server

warnings

mcp.guide.sonatype.com

Sonatype component intelligence: versions, security analysis, and Trust Score recommendations

https://mcp.guide.sonatype.com/mcpAPI keyMCP 2025-11-25v1.0.0last checked 9 Oct 2026spoke MCP on 100% of 91 checks (30 days)initialize in 450 ms

Will my client connect?

Decided from what the probe found at the endpoint, and from what each client's own documentation says it can complete. Every row carries the day that documentation was read.

✓Claude CodeConnects with setup

The server asks for a credential issued out of band. Get one from its operator; Claude Code sends it as a header you configure.

claude mcp add --transport http dependency-management-mcp-server https://mcp.guide.sonatype.com/mcp \
  --header "Authorization: Bearer <your-token>"

Claude Code docs · read on 2026-08-30

✕Claude (claude.ai & Desktop)Not supported

The server asks for a credential issued out of band, and Claude (claude.ai & Desktop)'s documented connector setup takes OAuth rather than a header you supply.

Claude (claude.ai & Desktop) docs · read on 2026-08-30

✕ChatGPTNot supported

The server asks for a credential issued out of band, and ChatGPT's documented connector setup takes OAuth rather than a header you supply.

ChatGPT docs · read on 2026-08-30

✓CursorConnects with setup

The server asks for a credential issued out of band. Get one from its operator; Cursor sends it as a header you configure.

{
  "mcpServers": {
    "dependency-management-mcp-server": {
      "headers": {
        "Authorization": "Bearer <your-token>"
      },
      "url": "https://mcp.guide.sonatype.com/mcp"
    }
  }
}

Cursor docs · read on 2026-08-30

✓VS Code (Copilot)Connects with setup

The server asks for a credential issued out of band. Get one from its operator; VS Code (Copilot) sends it as a header you configure.

{
  "servers": {
    "dependency-management-mcp-server": {
      "headers": {
        "Authorization": "Bearer <your-token>"
      },
      "type": "http",
      "url": "https://mcp.guide.sonatype.com/mcp"
    }
  }
}

VS Code (Copilot) docs · read on 2026-08-30

How to authenticate

Checked against the endpoint by our probe on 9 Oct 2026. These are the capabilities the server advertises, not a prediction about any particular client.

Scheme	API key
Protected-resource metadata	✕Not found Without it a client has to guess where the authorization server lives.
Anonymous access	Refused — credentials required

What the probe found

warningAuthentication is required, but not via OAuth

The server challenged for credentials without pointing at any OAuth metadata, so it most likely expects a bearer token or API key you have to obtain by hand. Add it as a header when saving the server.

No CORS headers for browser-based clients

A cross-origin preflight came back without Access-Control-Allow-Origin, so the endpoint is reachable from native clients only — code running in a web page is stopped by the browser before a request is ever sent.

Tools

getComponentVersiongetLatestComponentVersiongetRecommendedComponentVersions

Contract history

1 Sep 2026v1.0.01 compatible

24 Aug 2026v1.0.0first recorded contract

Watch this server

Save its public contract as a baseline and manage breaking-change email alerts.

Set up a watch

Own this server?

Status badge

Status for a README, from the last probe — cached an hour, so up to seven hours behind the endpoint. Links back to this page.

[![MCP status](https://mcpi.app/servers/dependency-management-mcp-server/badge.svg)](https://mcpi.app/servers/dependency-management-mcp-server)