Dep Oracle
This is a security analysis tool that runs as an MCP server to evaluate your npm dependencies. It exposes operations to calculate trust scores (0-100) based on CVE history, maintainer activity, commit frequency, download stats, and funding. You can scan entire dependency trees, check individual packages, detect typosquatting attempts, and identify zombie dependencies that haven't been maintained in over a year. The blast radius analysis shows how many files would be affected if a package were compromised. It also suggests migration paths to safer alternatives using a built-in mapping of 131 packages to 192 alternatives. Useful when you want Claude to audit your supply chain risk during development, especially for projects with deep transitive dependency trees where manual review isn't practical.
- tools
- 8
- transport
- STDIO
- last updated
- Feb 22, 2026
Tools
8 toolsPublic tool metadata for what this MCP can expose to an agent.
dep_oracle_scanFull project dependency scan
Full project dependency scan
No parameter schema in public metadata yet.
dep_oracle_trust_scoreTrust score for a single package
Trust score for a single package
No parameter schema in public metadata yet.
dep_oracle_blast_radiusImpact analysis for a package
Impact analysis for a package
No parameter schema in public metadata yet.
dep_oracle_zombiesList all zombie dependencies
List all zombie dependencies
No parameter schema in public metadata yet.
dep_oracle_suggest_migrationGet alternative package suggestions
Get alternative package suggestions
No parameter schema in public metadata yet.
dep_oracle_typosquat_checkCheck typosquatting risk for a package name
Check typosquatting risk for a package name
No parameter schema in public metadata yet.
dep_oracle_compareCompare two packages side-by-side
Compare two packages side-by-side
No parameter schema in public metadata yet.
dep_oracle_reportGenerate a JSON report, optionally to file
Generate a JSON report, optionally to file
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageReadme
Details
- Repository
- github.com/ertugrulakben/dep-oracle
- Category
- Security & Pentesting
- Package
dep-oracle- Transport
- STDIO
- Registry
- MCP registry, active
Related Security & Pentesting MCP servers
View all
Dlp Mcpcx-anand-nandeshwar/security-mcp-marketplaceThe DLP MCP provides the compliance violation in the one drive, google drive documents.0stars
Malwarebazaarpipeworx-io/mcp-malwarebazaarMalwareBazaar MCP — abuse.ch malware sample database (free, key required)0stars