MCP Server for NPM Package Info

What is MCP Server for NPM Package Info?

A Model Context Protocol server that provides a tool to fetch npm package information. It is intended as an educational tool for MCP Server security and uses HTTP transport for remote connections.

How to use MCP Server for NPM Package Info?

Install dependencies with npm install and start the server with npm start. The server listens on port 3000 by default, but you can set the PORT environment variable (e.g., PORT=3500 npm start). Configure the server in your Agent MCP configuration as an HTTP endpoint.

Key features of MCP Server for NPM Package Info

• Exposes a getNpmPackageInfo tool via MCP
• Uses HTTP (Streamable HTTP) transport for remote connections
• Returns structured package information
• Supports session management for stateful connections
• Intentionally vulnerable for educational security training

Use cases of MCP Server for NPM Package Info

• Looking up npm package details from an AI agent or IDE
• Teaching MCP server security concepts in a controlled environment
• Integrating package info retrieval into MCP‑compatible workflows

FAQ from MCP Server for NPM Package Info

What is the purpose of this server?

It fetches npm package information using the getNpmPackageInfo tool and is intentionally vulnerable to serve as an educational tool for MCP Server security.

How do I change the port the server runs on?

Set the PORT environment variable before starting, e.g., PORT=3500 npm start. The default port is 3000.

What data does the server return?

The server returns a JSON object containing all available information about the requested npm package, as returned by the npm registry.

What transport does the server use?

It uses HTTP (Streamable HTTP) transport for remote connections and supports session management for stateful connections.

Does the server require authentication?

The README does not mention any authentication mechanism. Note that the server is intentionally vulnerable for educational purposes.