Plugins / Dev
Sonatype
Check open-source dependencies for vulnerabilities and policy violations.
xNAUT supports this plugin. It is a third-party MCP server; we neither host it nor vet it.
Connector
https://mcp.guide.sonatype.com/mcpA hosted endpoint. xNAUT talks to it directly, and nothing is installed.
Setup
- SONATYPE_GUIDE_TOKENpaste it once, into your own plugin library
Needs a Sonatype token.
What it can do · 3 tools
- getComponentVersionReturns detailed analysis of a specific dependency or multiple dependencies with metadata about quality, license
- getLatestComponentVersionReturns the latest version of a dependency or multiple dependencies with quality, license and security data.
- getRecommendedComponentVersionsReturns top dependency version recommendations ranked by Developer Trust Score with
Skills it ships · 1
A skill tells an agent when to reach for the tools above, and what good use looks like.
- sonatype-guide