Skip to main content

Set up the Sonatype MCP server

The Sonatype MCP server gives AI coding agents dependency intelligence: component version details, known vulnerabilities and risk scores, and recommended safe upgrade versions. This guide covers generating a Sonatype Guide API token and connecting the server to Mintive.

Prerequisites​

  • A Mintive admin account
  • A free Sonatype Guide account for each user who needs a token

Add Sonatype to Mintive​

  1. In Mintive, go to MCP store → Manage store.
  2. Find the Sonatype connector and click to configure it.
  3. Confirm Connection type is set to Per-user credentials and Authorization method to Bearer token.
  4. Click Save.

Each user generates their own token in Sonatype Guide under Settings > Tokens (guide.sonatype.com/settings/tokens) and pastes it into Mintive the first time they call a Sonatype tool.

Security considerations​

  • Tokens are tied to the individual user's Sonatype Guide account, so Mintive attributes every tool call to the person who generated it.
  • Keep tokens out of version control and shared files: anyone with a token can query dependency and vulnerability data as that user.
  • Rotate a token from Settings > Tokens in Sonatype Guide; revoking it there immediately cuts off the corresponding Mintive connection.

Next steps​