Augment Code guide

Add Snyk Studio to Augment Code to secure code generated with agentic workflows through a Large Language Model (LLM). You can achieve this in several ways. When you use it for the first time, Snyk Studio asks for trust and, if necessary, trigger authentication.

Prerequisites

• Install the code assistant extension

• Install the Snyk CLI

• Install the Snyk MCP

Install Augment Code

Visit the Augment Code website to download the correct version of the IDE plugin.

Install the Snyk MCP Server in Augment Code

Install the Snyk MCP Server using the method that best suits your operating system and local development environment.

Install with Node.js and npx

• Name: Snyk

• Command: npx -y snyk@latest mcp -t stdio

Install with pre-installed Snyk CLI

• Name: Snyk

• Command: /absolute/path/to/snyk mcp -t stdio

If the snyk command is not available, add it by following the instructions on the Installing or updating the Snyk CLI page.

Setting up the Snyk MCP Server

The MCP Server starts automatically. The following example shows a Snyk MCP Server that was successfully configured and started.

As a one-time setup, authenticate and trust the current Project directory. If required, the agentic workflow will likely manage this automatically.

If you are already authenticated with the Snyk CLI installed on your system path, or through a prior interaction, then proceed to work with the Snyk MCP Server.

Examples

Scanning for security vulnerabilities

In the chat, you can tag specific files or functions and ask Augment Code to scan your code for safe deployment to production.

Scan this directory for code security & dependency vulnerabilities and security issues

Augment Code indicates that this request is related to security vulnerability scanning and calls the Snyk MCP Server for various scans.

"Secure at inception" rules

To practice Secure at Inception, Snyk recommends adopting rules that align the LLM for secure code generation and workflows.

The following is a suggested instruction for Augment Code user guidelines:

- Always run Snyk Code scanning tool for new first party code generated.
- Always run Snyk SCA scanning tool for new dependencies or dependency updates.
- If any security issues are found based on newly introduced or modified code or dependencies, attempt to fix the issues using the results context from Snyk.
- Rescan the code after fixing the issues to ensure that the issues were fixed and that there are no newly introduced issues.
- Repeat this process until no issues are found.