{
 "categories": [
  "developer-tools",
  "devsecops"
 ],
 "deployment": "saas",
 "evidence": [
  {
   "date": "2026-10-16",
   "fact": "homepage",
   "note": "The Guide MCP page documents the hosted Dependency Management MCP server for choosing components during AI-assisted coding.",
   "source": "https://guide.sonatype.com/mcp",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "name",
   "note": "The Sonatype homepage lists Sonatype Guide separately from Nexus Repository, Firewall, Lifecycle, and SBOM Manager, and describes Guide as dependency decisions in AI builds.",
   "source": "https://www.sonatype.com/",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "vendor",
   "note": "The homepage is Sonatype's, and Guide is one of its products.",
   "source": "https://www.sonatype.com/",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "license",
   "note": "The Guide API requires a personal access token created in a Guide account. Guide is a Sonatype hosted product. This record does not treat a free-trial button on the company homepage as a published free tier.",
   "source": "https://guide.sonatype.com/api",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "deployment",
   "note": "The MCP server URL is the hosted endpoint https://mcp.guide.sonatype.com/mcp.",
   "source": "https://guide.sonatype.com/mcp",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.api.exists",
   "note": "The page says the Guide API provides REST APIs for searching component and vulnerability data.",
   "source": "https://guide.sonatype.com/api",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.api.kinds[0]",
   "note": "The page calls the Guide API REST.",
   "source": "https://guide.sonatype.com/api",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.api.auth[0]",
   "note": "Requests use a personal access token as Authorization Bearer. The example calls https://api.guide.sonatype.com/users/me.",
   "source": "https://guide.sonatype.com/api",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.api.coverage",
   "note": "The opened page states the purpose, component and vulnerability search, and shows the users/me call. It does not list the search routes, so coverage is partial.",
   "source": "https://guide.sonatype.com/api",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.api.docs",
   "note": "Opened as the current Guide API page.",
   "source": "https://guide.sonatype.com/api",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.mcp.first_party",
   "note": "The Guide site documents the hosted server and links github.com/sonatype/dependency-management-mcp-server.",
   "source": "https://guide.sonatype.com/mcp",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "modalities.mcp.verdict",
   "note": "The Sonatype repository README lists getComponentVersion, getLatestComponentVersion, and getRecommendedComponentVersions. GitHub reported a push on 2026-01-14 and archived false.",
   "source": "https://github.com/sonatype/dependency-management-mcp-server",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "verdict.scores.api",
   "note": "A bearer REST API is documented, but the opened page does not list the search operations. That is a narrow public surface, score 4.",
   "source": "https://guide.sonatype.com/api",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "verdict.scores.mcp",
   "note": "An official hosted server with three maintained-looking component tools is useful and narrow. The setup repository has not been pushed since January 2026, so the score stays at 6 rather than a broad official 8.",
   "source": "https://github.com/sonatype/dependency-management-mcp-server",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "freshness.watch[0].url",
   "note": "Opened and verified as the current Guide MCP page, including the hosted URL and bearer header.",
   "source": "https://guide.sonatype.com/mcp",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "freshness.watch[1].url",
   "note": "Opened and verified as the current Guide API page.",
   "source": "https://guide.sonatype.com/api",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "freshness.watch[2].url",
   "note": "Opened and verified as the Sonatype dependency-management MCP repository README.",
   "source": "https://github.com/sonatype/dependency-management-mcp-server",
   "tier": "declared"
  },
  {
   "date": "2026-10-16",
   "fact": "freshness.watch[3].url",
   "note": "Opened and verified as the Sonatype homepage that lists Guide as its own product.",
   "source": "https://www.sonatype.com/",
   "tier": "declared"
  }
 ],
 "freshness": {
  "last_verified": "2026-10-16",
  "volatility": "medium",
  "watch": [
   {
    "type": "mcp",
    "url": "https://guide.sonatype.com/mcp"
   },
   {
    "type": "docs",
    "url": "https://guide.sonatype.com/api"
   },
   {
    "type": "mcp",
    "url": "https://github.com/sonatype/dependency-management-mcp-server"
   },
   {
    "type": "product",
    "url": "https://www.sonatype.com/"
   }
  ]
 },
 "homepage": "https://guide.sonatype.com/mcp",
 "id": "sonatype-guide",
 "license": "commercial",
 "modalities": {
  "agent_docs": {
   "llms_txt": "unknown"
  },
  "api": {
   "auth": [
    "bearer"
   ],
   "coverage": "partial",
   "docs": "https://guide.sonatype.com/api",
   "exists": true,
   "kinds": [
    "rest"
   ]
  },
  "cli": {
   "exists": "unknown"
  },
  "computer_use": {
   "issues": [],
   "viability": "unknown"
  },
  "data_access": {
   "export": [],
   "import": []
  },
  "extensibility": {
   "scripting": [],
   "webhooks": "unknown"
  },
  "integrations": {
   "make": "unknown",
   "n8n": "unknown",
   "power_automate": "unknown",
   "zapier": "unknown"
  },
  "mcp": {
   "first_party": true,
   "third_party": [],
   "verdict": "official"
  },
  "rpa": {
   "drivability": "unknown",
   "notes": "No repeatable UI probe was run. Sonatype Guide is a hosted dependency-intelligence service. The documented machine paths are the Guide REST API and the hosted MCP server. This record is not Sonatype Nexus Repository, Firewall, Lifecycle, SBOM Manager, or Snyk.\n",
   "ui_stack": [
    "web-dom"
   ],
   "vendor_support": []
  },
  "sdk": {
   "exists": "unknown",
   "languages": [],
   "official": "unknown"
  }
 },
 "name": "Sonatype Guide",
 "platforms": [
  "web"
 ],
 "related": {
  "alternatives": [
   "snyk"
  ],
  "our_products": []
 },
 "schema_version": 1,
 "score_version": 1,
 "status": "active",
 "vendor": "Sonatype",
 "verdict": {
  "best_path": "mcp",
  "scores": {
   "api": 4,
   "cli": null,
   "computer_use": null,
   "integrations": null,
   "mcp": 6,
   "overall": 6,
   "rpa": null
  },
  "search": {
   "description": "Sonatype documents a hosted bearer-token MCP server with three component-intelligence tools, and a thinner Guide REST API page.",
   "title": "Sonatype Guide is automatable through its MCP server"
  },
  "summary": "Sonatype Guide is automatable today through its hosted MCP server. guide.sonatype.com/mcp and the sonatype repository document https://mcp.guide.sonatype.com/mcp with Authorization Bearer and a personal API token from guide.sonatype.com. The README lists three tools: getComponentVersion, getLatestComponentVersion, and getRecommendedComponentVersions. They return vulnerability, license, and version guidance for a component. The repository's latest push was 14 January 2026. The Guide site still documented the same URL on 16 October 2026. The Guide API page says the API is REST for component and vulnerability search and shows a bearer call to https://api.guide.sonatype.com/users/me. It does not list the component routes on the page that was opened. Zapier, Make, Power Automate, and n8n were not opened. Computer-use viability is unassessed. The MCP server scores 6. The API scores 4. The MCP server is the best path because its three tools are the operations the public pages actually name.\n"
 }
}