SERVER

PackageGuard — Live npm & PyPI Vulnerability, CVE, Dependency Risk & License Intelligence

Rank #161,949

smithery/tofan96you/packageguard-mcp

Live software supply-chain security engine for developers, engineering teams and AI agents. Query real npm and PyPI registry metadata including latest versions, release activity, version counts, maintenance signals, repositories and licenses; scan exact packages and versions for live vulnerabilities and CVEs through OSV.dev; audit known dependency risk; review license obligations before commercial distribution; and combine live security and maintenance signals into a transparent package risk score. Supports npm and PyPI. No API key required. Free tier: 10 requests/day. Always pin versions, verify advisories and run tests before upgrading.

Versions unknown

First listed

Oct 11, 2026

Last publish date

—

PURPOSE

What you can do with PackageGuard — Live npm & PyPI Vulnerability, CVE, Dependency Risk & License Intelligence

PackageGuard — Live npm & PyPI Vulnerability, CVE, Dependency Risk & License Intelligence is a Model Context Protocol (MCP) server. It ranks #161,949 of 162,202 active servers on MCP Toplist. PackageGuard — Live npm & PyPI Vulnerability, CVE, Dependency Risk & License Intelligence is listed on Smithery; no version information is available from the registries that list it or from its repository. It was first listed on Oct 11, 2026.

Not verifiedMCP Toplist has not yet written a checked profile for this server, so the paragraph above is assembled from registry data only. Its registry listings below are the authority on what it does.

CAPABILITIES AND LIMITATIONS

What PackageGuard — Live npm & PyPI Vulnerability, CVE, Dependency Risk & License Intelligence can and cannot do

Not verifiedMCP Toplist has not catalogued this server's tools or limitations. Check its registry listings below.

REQUIREMENTS

What you need before using PackageGuard — Live npm & PyPI Vulnerability, CVE, Dependency Risk & License Intelligence

DeclaredRemote authHosted remote, sign-in declared

The hosted endpoint is declared as gated by authentication — connect via its URL and authenticate with the provider (OAuth flow or an API key/header, per its docs).

Declared by Smithery, last synced Oct 28, 2026. Not independently verified by MCP Toplist.

Declared in the registry install config

Hosted endpoint declared as requiring authentication.

INSTALLATION AND FIRST TASK

Connect PackageGuard — Live npm & PyPI Vulnerability, CVE, Dependency Risk & License Intelligence and confirm it works

Remote · HTTP

claude mcp add --transport http packageguard-mcp https://server.smithery.ai/tofan96you/packageguard-mcp/mcp

This endpoint requires authentication — see the server’s docs for credentials.

Remote · HTTP

[mcp_servers.packageguard-mcp]
url = "https://server.smithery.ai/tofan96you/packageguard-mcp/mcp"

Add to ~/.codex/config.toml. This endpoint requires authentication — see the server’s docs for credentials.

Remote · HTTP

https://server.smithery.ai/tofan96you/packageguard-mcp/mcp

Settings → Connectors → “Add custom connector”, then paste this URL. This endpoint requires authentication — see the server’s docs for credentials.

Remote · HTTP

{
  "mcpServers": {
    "packageguard-mcp": {
      "url": "https://server.smithery.ai/tofan96you/packageguard-mcp/mcp"
    }
  }
}

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (per project). This endpoint requires authentication — see the server’s docs for credentials.

Remote · HTTP

{
  "servers": {
    "packageguard-mcp": {
      "type": "http",
      "url": "https://server.smithery.ai/tofan96you/packageguard-mcp/mcp"
    }
  }
}

Save as .vscode/mcp.json in your workspace. This endpoint requires authentication — see the server’s docs for credentials.

Remote · HTTP

{
  "mcpServers": {
    "packageguard-mcp": {
      "serverUrl": "https://server.smithery.ai/tofan96you/packageguard-mcp/mcp"
    }
  }
}

Add to ~/.codeium/windsurf/mcp_config.json. This endpoint requires authentication — see the server’s docs for credentials.

Remote · HTTP

{
  "mcpServers": {
    "packageguard-mcp": {
      "url": "https://server.smithery.ai/tofan96you/packageguard-mcp/mcp"
    }
  }
}

This endpoint requires authentication — see the server’s docs for credentials.

First successful task

After adding the config, ask your client to list this server's tools. A tool list confirms the connection; an empty list or an error means the server did not start or needs credentials.

MAINTENANCE AND EVIDENCE

What changed, and when this was checked

First listed: Oct 11, 2026
Version history: Unavailable — no registry exposes versions and no release tags were found
Requirements evidence: Declared by Smithery, last synced Oct 28, 2026. Not independently verified by MCP Toplist.
Profile checked: Not yet — purpose, capabilities and requirements above come from registry data only
Ranking data as of: Oct 28, 2026

Registry sightings

Smithery ↗listed since Oct 28, 2026 · still listed

Do you maintain PackageGuard — Live npm & PyPI Vulnerability, CVE, Dependency Risk & License Intelligence? to correct or enrich this profile.

VERSIONS

Version information unavailable

The registry that lists this server does not expose version metadata, and no release tags were found on the linked repository. MCP Toplist cannot say how, or whether, this server is versioned.

STANDING

#161,949of 162,202 active servers

Ranks ahead of 253 of 162,202 servers on MCP Toplist.

BADGE

Show your rank

Maintain this server? Add the live rank badge to your README — it updates automatically as the leaderboard changes.

Markdown

[![MCP Toplist](https://mcptoplist.com/badge/smithery%2Ftofan96you%2Fpackageguard-mcp.svg)](https://mcptoplist.com/server/smithery%2Ftofan96you%2Fpackageguard-mcp)

HTML

<a href="https://mcptoplist.com/server/smithery%2Ftofan96you%2Fpackageguard-mcp"><img src="https://mcptoplist.com/badge/smithery%2Ftofan96you%2Fpackageguard-mcp.svg" alt="MCP Toplist: #161,949 of 162,202" /></a>

Variants: append ?metric=score or ?metric=stars to the image URL.

FAQ

Frequently asked questions

Is PackageGuard — Live npm & PyPI Vulnerability, CVE, Dependency Risk & License Intelligence listed on the Official MCP Registry?: PackageGuard — Live npm & PyPI Vulnerability, CVE, Dependency Risk & License Intelligence is not on the Official MCP Registry. It is listed on Smithery.
How many versions does PackageGuard — Live npm & PyPI Vulnerability, CVE, Dependency Risk & License Intelligence have?: Version information is unavailable for PackageGuard — Live npm & PyPI Vulnerability, CVE, Dependency Risk & License Intelligence: no registry that lists it exposes version metadata, and no release tags were found on its repository.

Used in projects

Do you run this server?

Community projects list the MCP servers behind real agents and apps. Publish yours and this page will link to it.

EXPLORE

All MCP Servers Best MCP Servers Most Active MCP Servers New MCP Servers Best New MCP Servers