Look up npm package metadata and known vulnerabilities directly from a conversation. NPMScan's MCP server gives AI agents six read-only tools backed by the npm registry, OSV.dev, and GitHub Security Advisories: search packages, inspect install scripts and maintainers before installing, check an exact version pinned in a lockfile, query vulnerabilities for one package or up to 100 at once (a full package.json/lockfile scan), and browse the latest reviewed advisories for the npm ecosystem. No API key or authentication is required, and every result links back to the full write-up on npmscan.com.

Programa

NPMScan