NPM Sentinel MCP

SSE

by Nekzus

18 363 downloads Not rated yet MIT

GitHub Website SSE

About

A powerful Model Context Protocol (MCP) server that revolutionizes NPM package analysis through AI.

Details

Transport: SSE
License: MIT

Explore

- Version analysis and tracking
- Dependency analysis and mapping
- Advanced Security Scanning: Recursive dependency checks, ecosystem awareness (e.g., React), and accurate version resolution.
- Strict Input Validation: Protection against Path Traversal, SSRF, and Command Injection via rigorous input sanitization.
- Package quality metrics
- Download trends and statistics
- TypeScript support verification
- Package size analysis
- Maintenance metrics
- Real-time package comparisons
- Standardized error handling and MCP response formats
- Efficient caching for improved performance and API rate limit management
- Rigorous schema validation and type safety using Zod

Note: The server provides AI-assisted analysis through MCP integration.

Setting up with Highlight

This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:

Download and install Highlight from highlightai.com/download
Navigate to the plugins tab and select "Add Custom Plugin"
Configure the plugin with the settings below

Plugin Name NPM Sentinel MCP

Command (node, npx, python, etc.)

Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
Enable "Start Automatically" if you want the plugin to start when Highlight launches

Setting up with Cursor

Open Cursor's settings
Navigate to the MCP section
Click "Add new Global MCP server"
Copy and paste the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "npm sentinel mcp": {
            "npm-sentinel-mcp": {
                "command": "docker",
                "args": [
                    "build",
                    "-t",
                    "nekzus/npm-sentinel-mcp",
                    "."
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "npm sentinel mcp": {
            "npm-sentinel-mcp": {
                "command": "docker",
                "args": [
                    "build",
                    "-t",
                    "nekzus/npm-sentinel-mcp",
                    "."
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "npm sentinel mcp": {
            "npm-sentinel-mcp": {
                "command": "docker",
                "args": [
                    "build",
                    "-t",
                    "nekzus/npm-sentinel-mcp",
                    "."
                ]
            }
        }
    }
}

Setting up with Claude Desktop

Open Claude Desktop's settings
Go to the Integrations tab
Click "Add MCP Server"
Use the configuration below based on your operating system

Note: Make sure Claude Desktop is running before attempting to connect.

JSON

{
    "mcpServers": {
        "npm sentinel mcp": {
            "npm-sentinel-mcp": {
                "command": "docker",
                "args": [
                    "build",
                    "-t",
                    "nekzus/npm-sentinel-mcp",
                    "."
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "npm sentinel mcp": {
            "npm-sentinel-mcp": {
                "command": "docker",
                "args": [
                    "build",
                    "-t",
                    "nekzus/npm-sentinel-mcp",
                    "."
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "npm sentinel mcp": {
            "npm-sentinel-mcp": {
                "command": "docker",
                "args": [
                    "build",
                    "-t",
                    "nekzus/npm-sentinel-mcp",
                    "."
                ]
            }
        }
    }
}

Setting up with Windsurf

Open Windsurf's preferences
Go to the Integrations section
Click "Add MCP Integration"
Use the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "npm sentinel mcp": {
            "npm-sentinel-mcp": {
                "command": "docker",
                "args": [
                    "build",
                    "-t",
                    "nekzus/npm-sentinel-mcp",
                    "."
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "npm sentinel mcp": {
            "npm-sentinel-mcp": {
                "command": "docker",
                "args": [
                    "build",
                    "-t",
                    "nekzus/npm-sentinel-mcp",
                    "."
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "npm sentinel mcp": {
            "npm-sentinel-mcp": {
                "command": "docker",
                "args": [
                    "build",
                    "-t",
                    "nekzus/npm-sentinel-mcp",
                    "."
                ]
            }
        }
    }
}

Setting up with Cline

Open Cline's settings
Navigate to the Integrations section
Click "Add MCP Server"
Copy and paste the configuration below based on your operating system

Note: Make sure to restart Cline after adding the configuration.

JSON

{
    "mcpServers": {
        "npm sentinel mcp": {
            "npm-sentinel-mcp": {
                "command": "docker",
                "args": [
                    "build",
                    "-t",
                    "nekzus/npm-sentinel-mcp",
                    "."
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "npm sentinel mcp": {
            "npm-sentinel-mcp": {
                "command": "docker",
                "args": [
                    "build",
                    "-t",
                    "nekzus/npm-sentinel-mcp",
                    "."
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "npm sentinel mcp": {
            "npm-sentinel-mcp": {
                "command": "docker",
                "args": [
                    "build",
                    "-t",
                    "nekzus/npm-sentinel-mcp",
                    "."
                ]
            }
        }
    }
}

Setting up with Goose

Open Goose's preferences
Go to the Integrations tab
Select "MCP Servers"
Click "Add New Server"
Use the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "npm sentinel mcp": {
            "npm-sentinel-mcp": {
                "command": "docker",
                "args": [
                    "build",
                    "-t",
                    "nekzus/npm-sentinel-mcp",
                    "."
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "npm sentinel mcp": {
            "npm-sentinel-mcp": {
                "command": "docker",
                "args": [
                    "build",
                    "-t",
                    "nekzus/npm-sentinel-mcp",
                    "."
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "npm sentinel mcp": {
            "npm-sentinel-mcp": {
                "command": "docker",
                "args": [
                    "build",
                    "-t",
                    "nekzus/npm-sentinel-mcp",
                    "."
                ]
            }
        }
    }
}

From the repository

The server supports the following configuration options:

| Environment Variable | CLI Argument | Default | Description |
| -------------------- | ------------ | ------- | ----------- |
| NPM_REGISTRY_URL | config.NPM_REGISTRY_URL | https://registry.npmjs.org | URL of the NPM registry to use for all requests |

When calling a tool, simply include ignoreCache: true in the arguments:

{
  "name": "npmVersions",
  "arguments": {
    "packages": ["react"],
    "ignoreCache": true
  }
}

Add this to your VS Code MCP config file. See VS Code MCP docs for more info.

{
  "servers": {
    "npm-sentinel": {
      "type": "stdio",
      "command": "npx",
      "args": ["-y", "@nekzus/mcp-server@latest"]
    }
  }
}

This MCP server now supports HTTP streamable transport through Smithery.ai for enhanced scalability and performance. You can deploy it directly on Smithery.ai:
Benefits of HTTP deployment:
- Scalable: Handles multiple concurrent connections
- Streamable: Real-time streaming responses
- Managed: Automatic deployment and monitoring
- Backward Compatible: Still supports STDIO for local development
- Interactive Testing: Built-in playground for testing tools

Configuration for Smithery.ai:

{

  "mcpServers": {

    "npm-sentinel": {

      "type": "http",

      "url": "https://smithery.ai/server/@Nekzus/npm-sentinel-mcp"

    }

  }

}

When deploying via Smithery or Docker, you can configure these options in your configuration file:

{
  "mcpServers": {
    "npm-sentinel": {
      "type": "http",
      "url": "https://smithery.ai/server/@Nekzus/npm-sentinel-mcp",
      "config": {
        "NPM_REGISTRY_URL": "https://registry.npmjs.org"
      }
    }
  }
}

Add this to your claude_desktop_config.json:

{
  "mcpServers": {
    "npmsentinel": {
      "command": "npx",
      "args": ["-y", "@nekzus/mcp-server@latest"]
    }
  }
}

Configuration file locations:
- Windows: %APPDATA%\Claude\claude_desktop_config.json
- macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
- Linux: (Claude for Desktop does not officially support Linux at this time)

npm install

`npmLatest`

Latest version & changelog

`npmSearch`

Search NPM packages

`npmTrends`

Download trends & popularity

`npmVulnerabilities`

Security analysis

`npmVersions`

Available versions list

`npmDeps`

Deps & devDeps analysis

`npmTypes`

TS types availability

`npmSize`

Package & bundle size

`npmCompare`

Compare multiple packages

`npmQuality`

Quality metrics analysis

`npmMaintenance`

Maintenance metrics analysis

`npmScore`

Consolidated package score

`npmMaintainers`

Maintainers info

`npmPackageReadme`

Full README content

`npmLicenseCompatibility`

License compatibility check

`npmRepoStats`

Repository statistics

`npmDeprecated`

Check deprecation status

`npmChangelogAnalysis`

Changelog & release history

`npmAlternatives`

Find similar alternatives

Claude Desktop / Cursor

Paste into your MCP client config file to install this server.

{
    "mcpServers": {
        "npm sentinel mcp": {
            "npm-sentinel-mcp": {
                "command": "docker",
                "args": [
                    "build",
                    "-t",
                    "nekzus/npm-sentinel-mcp",
                    "."
                ]
            }
        }
    }
}

McpServers

{
    "npm-sentinel-mcp": {
        "command": "docker",
        "args": [
            "build",
            "-t",
            "nekzus/npm-sentinel-mcp",
            "."
        ]
    }
}

</div>

A powerful Model Context Protocol (MCP) server that revolutionizes NPM package analysis through AI. Built to integrate with Claude and Anthropic AI, it provides real-time intelligence on package security, dependencies, and performance. This MCP server delivers instant insights and smart analysis to safeguard and optimize your npm ecosystem, making package management decisions faster and safer for modern development workflows.

Features

Note: The server provides AI-assisted analysis through MCP integration.

Caching and Invalidation

To ensure data accuracy while maintaining performance, the server implements robust caching strategies:
- Automatic Invalidation: The cache is automatically invalidated whenever pnpm-lock.yaml, package-lock.json, or yarn.lock changes in your workspace. This ensures you always get fresh data after installing or updating dependencies.
- Force Refresh: All tools accept an optional ignoreCache: true parameter to bypass the cache and force a fresh lookup from the registry.

Example Usage (JSON-RPC)

When calling a tool, simply include ignoreCache: true in the arguments:

{
  "name": "npmVersions",
  "arguments": {
    "packages": ["react"],
    "ignoreCache": true
  }
}

Installation

Migration to HTTP Streamable

This MCP server now supports both STDIO and HTTP streamable transport. Your existing STDIO configuration will continue to work without changes.

New capabilities:
- HTTP streamable transport via Smithery.ai
- Enhanced scalability and performance
- Interactive testing playground

Development commands:
```bash

No reviews yet — be the first

Use Google, GitHub, or an email account so ratings stay tied to real people.

Email sign in

No reviews posted yet.

About

Details

Explore

Setting up with Highlight

From the repository

npmLatest

npmSearch

npmTrends

npmVulnerabilities

npmVersions

npmDeps

npmTypes

npmSize

npmCompare

npmQuality

npmMaintenance

npmScore

npmMaintainers

npmPackageReadme

npmLicenseCompatibility

npmRepoStats

npmDeprecated

npmChangelogAnalysis

npmAlternatives

Claude Desktop / Cursor

McpServers

Features

Caching and Invalidation

Example Usage (JSON-RPC)

Installation

Migration to HTTP Streamable

More like this

Sequential Thinking

Sentry

Github

Filesystem

`npmLatest`

`npmSearch`

`npmTrends`

`npmVulnerabilities`

`npmVersions`

`npmDeps`

`npmTypes`

`npmSize`

`npmCompare`

`npmQuality`

`npmMaintenance`

`npmScore`

`npmMaintainers`

`npmPackageReadme`

`npmLicenseCompatibility`

`npmRepoStats`

`npmDeprecated`

`npmChangelogAnalysis`

`npmAlternatives`