Sonatype Guide is automatable through its MCP server

Sonatype · saas · developer-toolsdevsecops

Sonatype Guide is automatable today through its hosted MCP server. guide.sonatype.com/mcp and the sonatype repository document https://mcp.guide.sonatype.com/mcp with Authorization Bearer and a personal API token from guide.sonatype.com. The README lists three tools: getComponentVersion, getLatestComponentVersion, and getRecommendedComponentVersions. They return vulnerability, license, and version guidance for a component. The repository's latest push was 14 January 2026. The Guide site still documented the same URL on 16 October 2026. The Guide API page says the API is REST for component and vulnerability search and shows a bearer call to https://api.guide.sonatype.com/users/me. It does not list the component routes on the page that was opened. Zapier, Make, Power Automate, and n8n were not opened. Computer-use viability is unassessed. The MCP server scores 6. The API scores 4. The MCP server is the best path because its three tools are the operations the public pages actually name.

Best path today: mcp · Overall automatability: 6/10

Modalities

ModalityStatusDetail
APIyesrestbearer
coverage: partial · docs
SDKunknown
official: unknown
MCPyes
verdict: official
Integrationsunknown
CLIunknown
Extensibilityunknown
webhooks: unknown
Data access
export: unknown · import: unknown
RPA / UI automationunknownweb-dom
No repeatable UI probe was run. Sonatype Guide is a hosted dependency-intelligence service. The documented machine paths are the Guide REST API and the hosted MCP server. This record is not Sonatype Nexus Repository, Firewall, Lifecycle, SBOM Manager, or Snyk.
Computer useunknown
measured verdicts only — "unknown" means not yet probed by us

Scores

apimcpintegrationsclirpacomputer useoverall
46————6

Evidence

FactTierSourceDate
homepagedeclaredsource2026-10-16
namedeclaredsource2026-10-16
vendordeclaredsource2026-10-16
licensedeclaredsource2026-10-16
deploymentdeclaredsource2026-10-16
modalities.api.existsdeclaredsource2026-10-16
modalities.api.kinds[0]declaredsource2026-10-16
modalities.api.auth[0]declaredsource2026-10-16
modalities.api.coveragedeclaredsource2026-10-16
modalities.api.docsdeclaredsource2026-10-16
modalities.mcp.first_partydeclaredsource2026-10-16
modalities.mcp.verdictdeclaredsource2026-10-16
verdict.scores.apideclaredsource2026-10-16
verdict.scores.mcpdeclaredsource2026-10-16
freshness.watch[0].urldeclaredsource2026-10-16
freshness.watch[1].urldeclaredsource2026-10-16
freshness.watch[2].urldeclaredsource2026-10-16
freshness.watch[3].urldeclaredsource2026-10-16

Related tools

Other products in this database that share a category with Sonatype Guide.

Last verified 2026-10-16 · volatility medium · JSON record