Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
NPMScan is an MCP integration. Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups.
The registry lists a streamable-http connection at https://npmscan.com/api/mcp.
Check the maintainer’s instructions for account access, authentication and the supported client configuration. Once connected, inspect the tools your client receives and try a small task that matches the server’s stated purpose. The registry description does not include a verified, complete tool list.
View the publisher’s registry entry · Project repository. This profile uses version 1.0.0 from the registry. Registration identifies the publisher namespace; it does not establish that this is a first-party integration for every service it connects.
Browse related developer tools MCP servers for tools that cover the same kind of work.
Read, search and edit files inside allowed directories with the Model Context Protocol reference Filesystem server.
Retrieve version-aware library documentation and code examples with Context7 MCP, using resolve-library-id and query-docs.
Calibrated advice for coding agents: typed questions in, probabilities out. Apple Silicon.
Live access to your product strategy: scored roadmap, decisions, PRDs, guarded status write-back.
Give Claude, Cursor, Windsurf, or VS Code Copilot a cryptographic identity layer in under two minutes.
Offline, keyless lookup of the US civil aircraft registry — decode N-numbers, search records.