Probely (Snyk API & Web) MCP server

What the model can do

Probely, now Snyk API & Web, scans web apps and APIs for vulnerabilities: targets with their risk and open findings by severity, findings by target, severity, state, newness or change date with CWE, CVSS, URL, parameter and how to fix, scans with status and counts, and scan profiles. When you ask, can start, cancel, pause or resume a scan, change a finding's state, severity or assignee, retest a finding, and delete a target.

Reads

• probely_list_targetsProbely targets (web apps and APIs being scanned): name, URL, risk, open findings by severity, last and next scan, labels and teams.
• probely_list_findingsProbely vulnerability findings across targets or for some: title, CWE, severity, state, CVSS, URL and parameter, assignee id, first and last found.
• probely_get_findingOne Probely finding in full: description of the vulnerability, how to fix it, where it was found, state, review status and comment.
• probely_list_scansProbely scans: target, status, start and end, duration, profile, findings by severity, warnings, who started it (by id).
• probely_list_scan_profilesProbely scan profiles (how deep and how fast a scan goes): id, name, description, type, speed, maximum run time, whether built in.

Acts, when you ask

These change something in Probely (Snyk API & Web). The model is told to use them only when you ask for exactly that, and each one is granted by name: per team on a shared connection, by the owner on a personal one.

• probely_start_scanStarts a Probely scan of a target now, which sends attack traffic to the live site or API and uses a scan credit unless the target is unlimited.
• probely_cancel_scanCancels a running or queued Probely scan.
• probely_pause_scanPauses a running Probely scan, or resumes a paused one (resume can ignore the blackout window).
• probely_update_findingChanges a Probely finding: state (notfixed, invalid, accepted, fixed), severity, assignee (a user id; null unassigns) or comment…
• probely_retest_findingAsks Probely to retest one finding, which runs a short scan against the live site to see whether it is fixed (and may use a credit).
• probely_delete_targetPermanently deletes a Probely target with all its scans, findings and settings, for everyone in the account.

Connect it

First connect Probely (Snyk API & Web) on Dashboard → Connections, then add Memtro to your client once. The Probely (Snyk API & Web) tools appear alongside the tools of everything else you have connected; nothing is configured per connector.

claude plugin marketplace add memtro-org/claude-memtro
claude plugin install memtro@memtro --config api_key=sk-memtro-...

{
  "mcpServers": {
    "memtro": {
      "url": "https://platform.memtro.com/api/mcp",
      "headers": {
        "Authorization": "Bearer sk-memtro-..."
      }
    }
  }
}

{
  "mcp": {
    "memtro": {
      "type": "remote",
      "url": "https://platform.memtro.com/api/mcp",
      "headers": {
        "Authorization": "Bearer sk-memtro-..."
      }
    }
  }
}

Who may use it

The key identifies the person, and the server offers that person the tools they may use everywhere else in Memtro. A shared Probely (Snyk API & Web) connection is used by the teams an administrator granted it to, tool by tool, on the Permissions page; a personal connection is used by its owner alone, and its tools that act stay off until the owner allows them. See Teams and permissions and Connectors.

Ask it like this

• › Which targets have open high-severity findings?
• › What was found on the checkout app this week?
• › How do we fix the SQL injection finding on the API target?
• › Which scans are running now?
• › What scan profiles do we have?

Questions

Is this an official Probely (Snyk API & Web) MCP server?

No. It is Memtro's MCP server with Memtro's Probely (Snyk API & Web) connector behind it: the connector reads Probely (Snyk API & Web) through its API with the credentials you connect on Dashboard → Connections, and Probely (Snyk API & Web) publishes nothing here. The same endpoint carries every other system you connect and Memtro's memory tools.

What does it cost?

Nothing on top of Memtro. One price per organisation by its number of users, from $50 a month for up to 10 users after a 7-day free trial, with every connector, the MCP server, jobs and memory included. You bring your own model keys.

Can it change anything in Probely (Snyk API & Web)?

Only when you ask, and only what it has been granted: start a scan of a target; cancel a scan; pause or resume a scan; change a finding's state, severity, assignee or comment; retest a finding; delete a target with its scans and findings. Every other tool reads, searches or lists. An administrator grants each acting tool by name per team, and a personal connection acts only after its owner allows it.

Which clients work?

Any MCP client that speaks Streamable HTTP: Claude Code, Cursor, Claude Desktop, OpenCode, Codex, Zed, Windsurf, Cline and the Anthropic and OpenAI SDKs. There is no local process to run; the server is remote and authenticated with your key.

Other MCP servers · Engineering and operations

• GitHub MCP server
• AWS CloudWatch MCP server
• Sentry MCP server
• ServiceNow MCP server
• Okta MCP server
• Twilio MCP server