Package-risk MCP Server

Package-risk is an MCP integration. Package risk checks: maintenance, licence, advisories. Paid per call in USDC, no signup.

Packages and local setup

The published npm package is @makosdav/package-risk-mcp, version 1.0.5. Its declared MCP transport is stdio.

The package declares EVM_PRIVATE_KEY (required): Private key of an EVM wallet holding a small amount of USDC on Base mainnet. Each tool call spends $0.005-$0.01 from it. Use a lightly funded key dedicated to this agent, never a main wallet..

Before connecting

Check the maintainer’s instructions for account access, authentication and the supported client configuration. Once connected, inspect the tools your client receives and try a small task that matches the server’s stated purpose. The registry description does not include a verified, complete tool list.

Project and source

View the publisher’s registry entry · Project repository. This profile uses version 1.0.5 from the registry. Registration identifies the publisher namespace; it does not establish that this is a first-party integration for every service it connects.

Browse related developer tools MCP servers for tools that cover the same kind of work.