
Freshdeps Mcp
Solves the problem of AI agents recommending outdated or vulnerable npm and PyPI packages by exposing a single tool, check_dependency_freshness, that hits a live verdict API. You pass it an ecosystem and package name, and it returns maintenance status (active, slowing, stale, abandoned), latest version, release recency, deprecation flags, CVE counts from OSV, and hand-curated alternatives for dead packages. Closes the 6 to 18 month gap between when a package dies and when the model's training cutoff reflects it. Install via npx or point at the repo. Speaks JSON-RPC over stdio and supports custom API backends via environment variables.
- tool
- 1
- last updated
- May 15, 2026
Tools
1 toolsPublic tool metadata for what this MCP can expose to an agent.
check_dependency_freshnessReturns a concise human-readable summary and structured content covering maintenance signal, latest version, last release/commit age, deprecation/yank/archived flags, known CVE count (OSV), and a hand-verified alternative if the package is dead.
Returns a concise human-readable summary and structured content covering maintenance signal, latest version, last release/commit age, deprecation/yank/archived flags, known CVE count (OSV), and a hand-verified alternative if the package is dead.
No parameter schema in public metadata yet.
Sponsors
Readme
freshdeps-mcp
MCP server exposing live npm / PyPI dependency-health verdicts so AI coding agents can check a package before recommending it — closing the 6–18 month staleness gap in model training data.
Tool
check_dependency_freshness
| Input | Type |
|---|---|
ecosystem | "npm" | "pypi" |
package | string |
Returns a concise human-readable summary and structured content:
maintenance signal (active/slowing/stale/abandoned/unknown),
latest version, last release/commit age, deprecation/yank/archived flags,
known CVE count (OSV), and a hand-verified alternative if the package is
dead.
It calls ${FRESHDEPS_API_BASE}/api/verdict (default
https://freshdeps.vercel.app).
Install (Claude Desktop / Cursor)
Once published:
{
"mcpServers": {
"freshdeps": { "command": "npx", "args": ["-y", "freshdeps-mcp"] }
}
}
From this repo (before publish):
{
"mcpServers": {
"freshdeps": {
"command": "node",
"args": ["/absolute/path/to/code/mcp/server.js"]
}
}
}
Run / test manually
npm install
FRESHDEPS_API_BASE=http://localhost:3100 node server.js
Details
- Repository
- github.com/solvohq/freshdeps-mcp
- Website
- freshdeps.vercel.app
- Category
- Security & Pentesting
- Registry
- MCP registry, active