Claude MarketplacesSubmit
nekzus avatar

Npm Sentinel Mcp

nekzus/npm-sentinel-mcp

Connects Claude to the NPM registry for deep package analysis and security scanning. Exposes tools for version tracking, dependency mapping, quality metrics, download stats, and TypeScript support checks. The security scanning is recursive, following the full dependency tree with ecosystem awareness for frameworks like React. Input validation blocks path traversal and injection attacks. Includes smart caching that auto-invalidates when your lock files change, with manual cache bypass available. Works over stdio or HTTP streamable transport. Useful when you're evaluating packages, auditing dependencies, or need AI-assisted insights on what's safe to install before you commit to adding it to your project.

GitHub stars
18
tools
19
transport
STDIO
last updated
Aug 24, 2026
View on GitHub

Tools

19 tools

Public tool metadata for what this MCP can expose to an agent.

npmLatestLatest version & changelog2 params

Latest version & changelog

Parameters* required
ignoreCacheboolean
Bypass cache
packagesarray
Package names array
npmSearchSearch NPM packages3 params

Search NPM packages

Parameters* required
ignoreCacheboolean
Bypass cache
limitnumber
Max results
querystring
Search query
npmTrendsDownload trends & popularity3 params

Download trends & popularity

Parameters* required
ignoreCacheboolean
Bypass cache
packagesarray
Package names array
periodstring
Periodone of last-week · last-month · last-year
npmVulnerabilitiesSecurity analysis2 params

Security analysis

Parameters* required
ignoreCacheboolean
Bypass cache
packagesarray
Package names array
npmVersionsAvailable versions list2 params

Available versions list

Parameters* required
ignoreCacheboolean
Bypass cache
packagesarray
Package names array
npmDepsDeps & devDeps analysis2 params

Deps & devDeps analysis

Parameters* required
ignoreCacheboolean
Bypass cache
packagesarray
Package names array
npmTypesTS types availability2 params

TS types availability

Parameters* required
ignoreCacheboolean
Bypass cache
packagesarray
Package names array
npmSizePackage & bundle size2 params

Package & bundle size

Parameters* required
ignoreCacheboolean
Bypass cache
packagesarray
Package names array
npmCompareCompare multiple packages2 params

Compare multiple packages

Parameters* required
ignoreCacheboolean
Bypass cache
packagesarray
Package names array
npmQualityQuality metrics analysis2 params

Quality metrics analysis

Parameters* required
ignoreCacheboolean
Bypass cache
packagesarray
Package names array
npmMaintenanceMaintenance metrics analysis2 params

Maintenance metrics analysis

Parameters* required
ignoreCacheboolean
Bypass cache
packagesarray
Package names array
npmScoreConsolidated package score2 params

Consolidated package score

Parameters* required
ignoreCacheboolean
Bypass cache
packagesarray
Package names array
npmMaintainersMaintainers info2 params

Maintainers info

Parameters* required
ignoreCacheboolean
Bypass cache
packagesarray
Package names array
npmPackageReadmeFull README content2 params

Full README content

Parameters* required
ignoreCacheboolean
Bypass cache
packagesarray
Package names array
npmLicenseCompatibilityLicense compatibility check3 params

License compatibility check

Parameters* required
ignoreCacheboolean
Bypass cache
packagesarray
Package names array
projectLicensestring
Target license
npmRepoStatsRepository statistics2 params

Repository statistics

Parameters* required
ignoreCacheboolean
Bypass cache
packagesarray
Package names array
npmDeprecatedCheck deprecation status2 params

Check deprecation status

Parameters* required
ignoreCacheboolean
Bypass cache
packagesarray
Package names array
npmChangelogAnalysisChangelog & release history2 params

Changelog & release history

Parameters* required
ignoreCacheboolean
Bypass cache
packagesarray
Package names array
npmAlternativesFind similar alternatives2 params

Find similar alternatives

Parameters* required
ignoreCacheboolean
Bypass cache
packagesarray
Package names array

Sponsors

Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthlyAgent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any language

Readme

NPM Sentinel MCP

smithery badge Github Workflow npm version npm-month npm-total Docker Hub Ask DeepWiki Donate

View the full README on GitHub

Details

Repository
github.com/nekzus/npm-sentinel-mcp
Category
Security & Pentesting
Package
@nekzus/mcp-server
Transport
STDIO
Registry
MCP registry, active

More from nekzus

Related Security & Pentesting MCP servers

View all
1nekzus avatarNekzus Npm Sentinel Mcpnekzus/npm-sentinel-mcpProvide AI-powered real-time analysis and intelligence on NPM packages, including security, depend…17stars
2aidongise-cell avatarPrism Scanneraidongise-cell/prism-scannerSecurity scanner for AI Agent skills, plugins, and MCP servers with A-F grading.11stars
3madaburns avatarBlackVeil DNS & Email Security Scannermadaburns/bv-mcpDNS and email security scanner with 82 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.0stars
4snss10 avatarDBeast PostgreSQL MCPsnss10/dbeastPostgreSQL MCP server for schema, query, health, security, and performance analysis.9stars
5gautamvarmadatla avatarMCP Safety Wardengautamvarmadatla/mcpsafetywardenMCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution.8stars
6stackhawk avatarStackhawkstackhawk/stackhawk-mcpAn MCP server that provides interaction with StackHawk's security scanning platform.7stars