Sonatype Guide

Sonatype Guide is an AI-first product that enhances developer and application security (AppSec) productivity through automation and data intelligence. By extending Sonatype’s trusted data into modern Model Context Protocol (MCP)–aware IDEs, Guide helps developers and AI tools select the best and safest open-source components while simplifying and optimizing dependency management.

Getting started with Guide is simple:

1. Get set up in seconds – Start using Guide right away.
2. Perform component and vulnerability research – Use Guide’s Component and Vulnerability search features to find the best components to use in your projects.
3. Sonatype MCP Server – Leverage Sonatype’s MCP Server to get real-time security scanning, version guidance, and compliance checks directly in your interactions within MCP-aware IDEs and coding assistants (e.g., Claude, Cursor, and more).
4. Integrate Guide with your other tools – Leverage the Sonatype Guide API with endpoints for searching open source components, retrieving vulnerability details, and accessing security and compliance information.