Package Registry Mcp Server
@Artmann
About Package Registry Mcp Server
MCP server for searching and getting up-to-date information about NPM, Cargo, PyPi, and NuGet packages.
Config
Add this server to your MCP-compatible client using the configuration below.
{
"mcpServers": {
"package-registry": {
"command": "npx",
"args": [
"package-registry-mcp"
]
}
}
}Tools
16Get detailed information about a specific Cargo package
Search the Cargo registry for packages
List all versions of a specific Cargo package
Get detailed information about a specific GitHub Security Advisory by its GHSA ID (e.g., GHSA-grv7-fg5c-xmjg).
Search the GitHub Security Advisory Database for vulnerabilities. Filter by ecosystem (npm, pip, maven, etc.), severity, type, or CVE ID.
Get all security advisories affecting a specific package. Use this to check if a package like "braces" or "lodash" has known vulnerabilities.
Get detailed information about a specific Go module/package
List all versions of a specific Go module/package
Get detailed information about a specific NPM package
Search the NPM registry for packages
List all versions of a specific NPM package
Get detailed information about a specific NuGet package
Search the NuGet registry for packages
List all versions of a specific NuGet package
Get detailed information about a specific PyPI package
List all versions of a specific PyPI package
Overview
What is Package Registry Mcp Server?
A Model Context Protocol (MCP) server that enables AI assistants (Claude, Cursor, Copilot, etc.) to search package registries and retrieve up-to-date package information. It supports npm, crates.io, NuGet, PyPI, Go modules, and GitHub Security Advisories.
How to use Package Registry Mcp Server?
Install globally with npm install -g package-registry-mcp or run directly with npx package-registry-mcp. Configure as an MCP server in Cursor Settings, Claude Code via claude mcp add, or add to claude_desktop_config.json with command npx and args ["package-registry-mcp"].
Key features of Package Registry Mcp Server
- Search and get details for multiple package registries.
- Retrieve latest version and version history for any package.
- Search GitHub Security Advisories for known vulnerabilities.
- Get advisory details and per-package vulnerability reports.
- Real-time data fetched directly from official registries.
Use cases of Package Registry Mcp Server
- Ask an AI assistant to find the latest version of a dependency.
- Check a package for known security vulnerabilities before adding it.
- Compare versions and metadata across npm, crates.io, and NuGet.
- Retrieve dependency lists and maintainer info for audit purposes.
FAQ from Package Registry Mcp Server
What runtime is required?
Node.js 18+ or Bun runtime, plus an internet connection for registry access.
Can I use it without installing?
Yes. Run with npx package-registry-mcp — no global installation needed.
Does it support searching all registries?
No. PyPI and Go module search are not supported because those registries lack a JSON search API; only detail and version listing are available.
How do I configure it with Claude Desktop?
Add the server to claude_desktop_config.json with "command": "npx" and "args": ["package-registry-mcp"]. The config file location depends on your OS.
What data does it return?
Package metadata (name, description, version, license), dependencies, download statistics, maintainer info, and last 50 versions. Advisories include GHSA ID, CVE ID, severity, CVSS score, affected ranges, and patched versions.
Frequently asked questions
What runtime is required?
Node.js 18+ or Bun runtime, plus an internet connection for registry access.
Can I use it without installing?
Yes. Run with `npx package-registry-mcp` — no global installation needed.
Does it support searching all registries?
No. PyPI and Go module search are not supported because those registries lack a JSON search API; only detail and version listing are available.
How do I configure it with Claude Desktop?
Add the server to `claude_desktop_config.json` with `"command": "npx"` and `"args": ["package-registry-mcp"]`. The config file location depends on your OS.
What data does it return?
Package metadata (name, description, version, license), dependencies, download statistics, maintainer info, and last 50 versions. Advisories include GHSA ID, CVE ID, severity, CVSS score, affected ranges, and patched versions.
Basic information
More Other MCP servers
Inbox Zero AI MCP
elie222The world's best AI personal assistant for email. Open source app to help you reach inbox zero fast.
Awesome Mlops
visengerA curated list of references for MLOps
🚀 Model Context Protocol (MCP) Curriculum for Beginners
microsoftThis open-source curriculum introduces the fundamentals of Model Context Protocol (MCP) through real-world, cross-language examples in .NET, Java, TypeScript, JavaScript, Rust and Python. Designed for developers, it focuses on practical techniques for building modular, scalable,
IDA Pro MCP
mrexodiaAI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
🪟 Windows-MCP
CursorTouchMCP Server for Computer Use in Windows
Comments