"npm" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Signed, traced record of what an npm package or file attempts when run, network included. No key.
Known open GitHub issues in exact npm and PyPI versions, with workarounds, for coding agents.
npm/PyPI package dependency upgrade reviews: security, runtime compatibility, cited migration.
Package intelligence for AI agents across npm, PyPI, crates.io and deps.dev. No API keys.
Check exact npm/PyPI upgrades for evidence-backed breaking changes; query APIs and components.
Check if a dependency's license obligates you, based on how you ship. npm, PyPI, Go.
Dev-registry data: npm/PyPI/Docker/VS Code packages, dep graphs, vulns, 50+ ecosystems.
Check an npm package name shape. Name discarded.
Bundlephobia MCP — npm bundle-size analysis
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
Package intelligence for AI agents across npm, PyPI, crates.io and deps.dev. No API keys.
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
Packagephobia MCP — install-size analysis for npm packages
Change intelligence for coding agents: sourced breaking changes for npm, PyPI, and Rust packages.
Diff two npm/PyPI versions or lockfiles: new install scripts, network/shell/eval calls, new deps.
Check npm/PyPI packages exist and that a function or method exists in an exact package version.
npm & PyPI freshness for AI agents: latest version, deprecations, dated breaking-change diffs.
Source code search for every package on PyPI and npm.
