Nekzus Npm Sentinel Mcp
Connects Claude to the NPM registry API to analyze package security, dependencies, and metrics in real time. You get tools for version tracking, recursive dependency checks, download statistics, TypeScript support detection, and package comparisons. It validates inputs against path traversal and injection attacks, caches responses with automatic invalidation when lock files change, and lets you force fresh lookups with an ignoreCache flag. Useful when you're evaluating packages for a project, auditing dependency trees for vulnerabilities, or comparing alternatives before adding them to package.json. Runs via npx, Docker, or HTTP transport through Smithery for hosted deployments.
- GitHub stars
- 17
- tools
- 19
- auth
- Secret needed
- transport
- HTTP
- last updated
- Sep 20, 2025
Tools
19 toolsPublic tool metadata for what this MCP can expose to an agent.
npmLatestGet latest version information, release dates, SRI integrity hashes, and dist-tags.
Get latest version information, release dates, SRI integrity hashes, and dist-tags.
No parameter schema in public metadata yet.
npmVersionsGet full version history with release dates and deprecation statuses.
Get full version history with release dates and deprecation statuses.
No parameter schema in public metadata yet.
npmDepsComplete dependency tree analysis including direct dependencies and full transitive graph mapping via deps.dev.
Complete dependency tree analysis including direct dependencies and full transitive graph mapping via deps.dev.
No parameter schema in public metadata yet.
npmTypesVerify TypeScript support (native index.d.ts declaration files vs @types/* DefinitelyTyped packages).
Verify TypeScript support (native index.d.ts declaration files vs @types/* DefinitelyTyped packages).
No parameter schema in public metadata yet.
npmSizePackage bundle size, minified size, and gzip impact analysis.
Package bundle size, minified size, and gzip impact analysis.
No parameter schema in public metadata yet.
npmVulnerabilitiesInstant transitive vulnerability scanning powered by Google's deps.dev and OSV.dev advisories.
Instant transitive vulnerability scanning powered by Google's deps.dev and OSV.dev advisories.
No parameter schema in public metadata yet.
npmTrendsHistorical download statistics over customizable time ranges (last-week, last-month, last-year).
Historical download statistics over customizable time ranges (last-week, last-month, last-year).
No parameter schema in public metadata yet.
npmCompareSide-by-side metric comparison across multiple packages.
Side-by-side metric comparison across multiple packages.
No parameter schema in public metadata yet.
npmMaintainersList of package maintainers, public emails, and publishing activity.
List of package maintainers, public emails, and publishing activity.
No parameter schema in public metadata yet.
npmScoreConsolidated score combining quality, popularity, maintenance, and OpenSSF Scorecard.
Consolidated score combining quality, popularity, maintenance, and OpenSSF Scorecard.
No parameter schema in public metadata yet.
npmPackageReadmeRetrieve full formatted raw README markdown content from NPM registry / CDN.
Retrieve full formatted raw README markdown content from NPM registry / CDN.
No parameter schema in public metadata yet.
npmSearchSearch NPM registry packages by query with rich metadata (scores, publisher, keywords).
Search NPM registry packages by query with rich metadata (scores, publisher, keywords).
No parameter schema in public metadata yet.
npmLicenseCompatibilityAnalyze license compatibility across multiple packages (MIT, Apache-2.0, GPL, etc.).
Analyze license compatibility across multiple packages (MIT, Apache-2.0, GPL, etc.).
No parameter schema in public metadata yet.
npmRepoStatsRepository statistics (GitHub stars, forks, open issues) combined with OpenSSF Scorecard checks.
Repository statistics (GitHub stars, forks, open issues) combined with OpenSSF Scorecard checks.
No parameter schema in public metadata yet.
npmDeprecatedDetect deprecation status on package and recursive sub-dependencies.
Detect deprecation status on package and recursive sub-dependencies.
No parameter schema in public metadata yet.
npmChangelogAnalysisExtract release notes and GitHub release history.
Extract release notes and GitHub release history.
No parameter schema in public metadata yet.
npmAlternativesSmart functional alternative suggestions filtering out ecosystem plugins (e.g. excludes express-rate-limit for express).
Smart functional alternative suggestions filtering out ecosystem plugins (e.g. excludes express-rate-limit for express).
No parameter schema in public metadata yet.
npmQualityPackage code quality score (0–1).
Package code quality score (0–1).
No parameter schema in public metadata yet.
npmMaintenancePackage maintenance activity score (0–1).
Package maintenance activity score (0–1).
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageReadme
Details
- Repository
- github.com/nekzus/npm-sentinel-mcp
- Category
- Security & Pentesting
- Transport
- HTTP
- Auth
- Required
- Registry
- MCP registry, active
More from nekzus
Related Security & Pentesting MCP servers
View all
Prism Scanneraidongise-cell/prism-scannerSecurity scanner for AI Agent skills, plugins, and MCP servers with A-F grading.11stars
BlackVeil DNS & Email Security Scannermadaburns/bv-mcpDNS and email security scanner with 82 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.0stars
DBeast PostgreSQL MCPsnss10/dbeastPostgreSQL MCP server for schema, query, health, security, and performance analysis.9stars
MCP Safety Wardengautamvarmadatla/mcpsafetywardenMCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution.8stars
Stackhawkstackhawk/stackhawk-mcpAn MCP server that provides interaction with StackHawk's security scanning platform.7stars
Go Unifi Mcpclaytono/go-unifi-mcpManage UniFi sites, devices, clients, networks, port forwarding, DNS, and firewall6stars