"npm" matching MCP connectors:
GET /v1/connectors – MCP directory API referenceMatching Connector Tools:
Signed, traced record of what an npm package or file attempts when run, network included. No key.
What breaks between versions, vulnerabilities, compatible versions, EOL dates: npm, PyPI, Rust, PHP.
Check an npm/PyPI package before an AI agent installs it: 5 focused supply-chain tools.
Check an npm or Python package, or a package.json, for vulnerabilities and upkeep.
Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and re
Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and r.
Verify a company before your agent pays, onboards or contracts it. One call returns one verdict (ok / review / blocking / not found) from official public sources: US restricted-party lists (Consolidated Screening List incl. OFAC SDN, refreshed daily), UK Companies House, Canadian federal corporations, GLEIF legal entity status, and contractor licences in Québec (RBQ, RENA), Washington and Oregon. Also: npm/PyPI package safety check. Free tools: qc_contractor_check, qc_licence, pkg_check (daily quota). Paid tools: pay per call in USDC on Base (x402), no account.
Protects AI coding agents from installing malicious open source packages. Every npm and PyPI package is checked against SafeDep’s real-time threat intelligence before installation.
Live npm, PyPI and crates.io package facts, READMEs and vulnerability checks for coding agents.
Verify npm packages before your AI agent installs them: hallucinations, advisories, API drift.
Guardrails for LLM output: pass / fail / review verdicts and one recommended action. Hosted or npm.
npm/PyPI package dependency upgrade reviews: security, runtime compatibility, cited migration.
Scan packages and lockfiles (npm, PyPI, Go, Maven, Cargo, NuGet) for vulnerabilities and malware.
Supply chain risk scoring for npm, PyPI, Cargo, and Go. 9 tools. Behavioral signals.
Blocks typosquatted or hallucinated npm/PyPI packages before an AI agent installs them.
x402-gated safety checker for npm and PyPI packages. Built for AI coding agents to call before running npm install or pip install — flags nonexistent/typosquatted names, known CVEs (OSV.dev), and suspiciously new or low-download packages. $0.005 USDC per check on Base mainnet
Abandonment checks for WordPress, npm and PyPI packages, priced per call.
x402-gated safety checker for npm/PyPI packages before you npm install / pip install.
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
Audit webpage access for AI crawlers. API key and Premium or Partner plan required.
