Skip to main content
Glama
Sign In

Agent Dependency Radar — Package Advisory Preflight

by io.github.neat-cyber
OverviewDiscussionsAdmin

Server Details

Verify npm/PyPI versions and OSV advisories; batch pre-deployment Release Gate.

Ownership verified
Status
Healthy
Uptime
100.0% over the last 24 hours
Last Tested
Transport
Streamable HTTP · MCP 2025-06-18
URL
ChatGPT
–
Claude
–

TDQS

Score is being calculated.

Available Tools

4 tools
dependency_preflightInspect

Check an npm or PyPI package version against OSV known advisories, fetch the latest published release, compare current vs latest advisories, return provenance and actionable cautious upgrade guidance. No package download or code execution; limited beta usage.

Inputs: version (required), ecosystem (required), package_name (required).

ecosystem_catalogInspect

Find project-owned MCP tools for related agent operations, without redirects, tracking, unsolicited connections or paid calls.

Inputs: need.

radar_methodologyInspect

Get data source attributions, data freshness, safeguards, boundaries and budget policies for Agent Dependency Radar.

Inputs: no named parameters.

release_gateInspect

Pre-deployment advisory preflight for up to 3 exact npm/PyPI package releases in one MCP call, using verifiable registry versions and OSV known advisories. Returns review-needed flags and provenance; never auto-upgrades.

Inputs: packages (required).

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    Related MCP Connectors

    Related MCP Servers

    • osv-advisory-mcp-server

      cyanheads
      A
      license
      Not graded
      quality
      B
      maintenance
      Query OSV.dev for package vulnerabilities, batch-audit dependency lists, and fetch full advisory records via MCP.
      728 npm
      2
      Apache 2.0

    • shipcheck

      CloudCorpRecords
      A
      license
      Not graded
      quality
      B
      maintenance
      Enables verifying whether a release actually shipped by comparing one expected version across git tags, GitHub releases, npm, the MCP Registry, and GHCR, returning GO/NO-GO verdicts with per-surface evidence. It also supports focused npm and MCP Registry checks.
      60 npm
      MIT

    • pkgbouncer

      rayan1810
      A
      license
      Not graded
      quality
      B
      maintenance
      Enables AI coding agents to check package names and versions for allow/warn/deny verdicts, scan project lockfiles for known-malicious packages and critical advisories, and suggest safe versions across npm, PyPI, crates.io, and Go before manifests are edited.
      36 npm
      MIT

    • Dep Bouncer

      harsha31bs07-blip
      A
      license
      A
      quality
      B
      maintenance
      Enables AI coding agents to vet an npm release against the package's own history — publisher, provenance, install scripts, new dependencies, code changes — before installing or upgrading it. Returns an ALLOW / REVIEW / BLOCK verdict with supporting evidence, what other checks say, and the safe version to install instead.
      7
      1
      MIT
    Try in Browser
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    Glama MCP Gateway

    Add one secure layer between your agents and this server.

    Resources