Dep
Wraps npm's ecosystem tooling so Claude can analyze your JavaScript project's dependencies without you bouncing between terminal commands. It exposes five operations: license analysis that flags copyleft and unknown licenses, outdated package detection with semantic version categorization, dependency tree visualization with circular reference detection, bundle size estimation via the Bundlephobia API, and security audits using npm's advisory data. Each tool takes a project directory path and works directly against package.json. Reach for this when you're triaging a new codebase, preparing for an audit, or need to understand dependency health without context switching. It's essentially npm audit, npm outdated, and license checking surfaced as conversational tools.
- tools
- 5
- transport
- STDIO
- last updated
- Mar 22, 2026
Tools
5 toolsPublic tool metadata for what this MCP can expose to an agent.
dep_check_licensesAnalyze licenses of all dependencies in a project. Lists each dependency's license type, flags copyleft (GPL) and unknown licenses, and checks for compatibility issues.
Analyze licenses of all dependencies in a project. Lists each dependency's license type, flags copyleft (GPL) and unknown licenses, and checks for compatibility issues.
No parameter schema in public metadata yet.
dep_find_outdatedCheck which dependencies are outdated. Compares installed or specified versions against the latest on npm, categorizes updates as major/minor/patch, and shows how many days since the latest version was published.
Check which dependencies are outdated. Compares installed or specified versions against the latest on npm, categorizes updates as major/minor/patch, and shows how many days since the latest version was published.
No parameter schema in public metadata yet.
dep_analyze_treeBuild and display the dependency tree. Shows direct dependencies and their transitive sub-dependencies, calculates maximum depth, detects circular dependencies, and counts total transitive packages.
Build and display the dependency tree. Shows direct dependencies and their transitive sub-dependencies, calculates maximum depth, detects circular dependencies, and counts total transitive packages.
No parameter schema in public metadata yet.
dep_analyze_sizeEstimate total bundle size from package.json without installing node_modules. Queries the Bundlephobia API for each production dependency to get minified and gzipped sizes.
Estimate total bundle size from package.json without installing node_modules. Queries the Bundlephobia API for each production dependency to get minified and gzipped sizes.
No parameter schema in public metadata yet.
dep_security_auditCheck dependencies for known security vulnerabilities. Runs `npm audit` when a lockfile is present, otherwise queries the npm registry advisory API directly. Reports severity levels, affected version ranges, and fix recommendations.
Check dependencies for known security vulnerabilities. Runs `npm audit` when a lockfile is present, otherwise queries the npm registry advisory API directly. Reports severity levels, affected version ranges, and fix recommendations.
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageReadme
mcp-dep-tools
MCP server providing dependency and package management tools for AI agents. Analyze licenses, find outdated packages, visualize dependency trees, estimate bundle sizes, and audit security vulnerabilities — all from your AI assistant.
Tools
dep_check_licenses
Analyze licenses of all dependencies in a project. Lists each dependency's license type, flags copyleft (GPL) and unknown licenses, and checks for compatibility issues.
dep_find_outdated
Check which dependencies are outdated. Compares installed or specified versions against the latest on npm, categorizes updates as major/minor/patch, and shows how many days since the latest version was published.
dep_analyze_tree
Build and display the dependency tree. Shows direct dependencies and their transitive sub-dependencies, calculates maximum depth, detects circular dependencies, and counts total transitive packages.
dep_analyze_size
Estimate total bundle size from package.json without installing node_modules. Queries the Bundlephobia API for each production dependency to get minified and gzipped sizes.
Details
- Repository
- github.com/rog0x/mcp-dep-tools
- Category
- Security & Pentesting
- Package
@rog0x/mcp-dep-tools- Transport
- STDIO
- Registry
- MCP registry, active
More from rog0x
Related Security & Pentesting MCP servers
View all
Askew x402rubix1138/askew-mcpDeFi yields, staking routing, semantic research & security intel via x402 micro-payments on Base0stars
GuardLayersolvionholdings/guardlayer-pluginSecurity checks for Next.js + Supabase apps: code scan, read-only live DB check, fix confirmation.0stars
Agentscorethezenmonster/agentscoresMCP security trust layer: scan packages, inspect repos, check exposure, monitor changes.0stars
Mcp Gatewaycivicteam/civic-mcp-gatewayIdentity, authorization, audit trails, and revocable permissions for AI agents accessing MCP tools.0stars
SiteVitalstom18a/sitevitals-mcpMonitor website health, uptime, SEO, security and performance via your AI assistant.0stars