Dependency Management Mcp Server

com.sonatype/dependency-management-mcp-server

Sonatype component intelligence: versions, security analysis, and Trust Score recommendations

healthy

status

tools exposed

1582ms

connect latency

1135e664bba6

schema fingerprint

Tools (3)

getComponentVersion

Returns detailed analysis of a specific dependency or multiple dependencies with metadata about quality, license and security. Dependencies can be referred to as packages, components or libraries. They can be transitive (brought in by other dependencies) or direct (explicitly added to the project).

getLatestComponentVersion

Returns the latest version of a dependency or multiple dependencies with quality, license and security data. Dependencies can be referred to as packages, components or libraries. They can be transitive (brought in by other dependencies) or direct (explicitly added to the project).

getRecommendedComponentVersions

Returns top dependency version recommendations ranked by Developer Trust Score with security, licensing, and quality analysis. Developer Trust Score is a measure of quality, security, licensing, and maintainability. Use this when selecting a new component to add to a project (without version) or whe

Endpoint

https://mcp.guide.sonatype.com/mcp
Category: Other · Last checked: 2026-07-30T13:10:13Z

Monitor your own MCP server

Get alerted the moment yours goes down, a tool schema drifts, or an upstream silently breaks.

Get early access

How we measure →

What this means. This server responded to the MCP handshake and listed its tools without authentication. The schema fingerprint lets us flag if tool signatures silently change (schema drift) between checks.