NPM Sentinel MCP

A powerful Model Context Protocol (MCP) server that revolutionizes NPM package analysis through AI. Built to integrate with Claude and Anthropic AI, it provides real-time intelligence on package security, dependencies, and performance. This MCP server delivers instant insights and smart analysis to safeguard and optimize your npm ecosystem, making package management decisions faster and safer for modern development workflows.

Features

Version analysis and tracking
Dependency analysis and mapping
Security vulnerability scanning
Package quality metrics
Download trends and statistics
TypeScript support verification
Package size analysis
Maintenance metrics
Real-time package comparisons
Standardized error handling and MCP response formats
Efficient caching for improved performance and API rate limit management
Rigorous schema validation and type safety using Zod

Note: The server provides AI-assisted analysis through MCP integration.

Installation

Install in VS Code

Add this to your VS Code MCP config file. See VS Code MCP docs for more info.

{
  "servers": {
    "npm-sentinel": {
      "type": "stdio",
      "command": "npx",
      "args": ["-y", "@nekzus/mcp-server@latest"]
    }
  }
}

Docker

Build

# Build the Docker image
docker build -t nekzus/npm-sentinel-mcp .

Usage

You can run the MCP server using Docker with directory mounting to /projects:

{
  "mcpServers": {
    "npm-sentinel-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-w", "/projects",
        "--mount", "type=bind,src=${PWD},dst=/projects",
        "nekzus/npm-sentinel-mcp",
        "node",
        "dist/index.js"
      ]
    }
  }
}

For multiple directories:

{
  "mcpServers": {
    "npm-sentinel-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-w", "/projects",
        "--mount", "type=bind,src=/path/to/workspace,dst=/projects/workspace",
        "--mount", "type=bind,src=/path/to/other/dir,dst=/projects/other/dir,ro",
        "nekzus/npm-sentinel-mcp",
        "node",
        "dist/index.js"
      ]
    }
  }
}

Note: All mounted directories must be under /projects for proper access.

Usage with Claude Desktop

Add this to your claude_desktop_config.json:

{
  "mcpServers": {
    "npmsentinel": {
      "command": "npx",
      "args": ["-y", "@nekzus/mcp-server@latest"]
    }
  }
}

Configuration file locations:

Windows: %APPDATA%\Claude\claude_desktop_config.json
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
Linux: (Claude for Desktop does not officially support Linux at this time)

NPX

{
  "mcpServers": {
    "npm-sentinel-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@nekzus/mcp-server@latest"
      ]
    }
  }
}

API

The server exposes its tools via the Model Context Protocol. All tools adhere to a standardized response format:

{
  "content": [
    {
      "type": "text",
      "text": "string",
      "isError": boolean // Optional
    }
    // ... more content items if necessary
  ]
}

Resources

npm://registry: NPM Registry interface
npm://security: Security analysis interface
npm://metrics: Package metrics interface

Server Resources

The server also provides the following informational resources accessible via MCP GetResource requests:

doc://server/readme:
- Description: Retrieves the main README.md file content for this NPM Sentinel MCP server.
- MIME Type: text/markdown
doc://mcp/specification:
- Description: Retrieves the llms-full.txt content, providing the comprehensive Model Context Protocol specification.
- MIME Type: text/plain

Tools

npmVersions

Get all versions of a package
Input: packages (string[])
Returns: Version history with release dates

npmLatest

Get latest version information
Input: packages (string[])
Returns: Latest version details and changelog

npmDeps

Analyze package dependencies
Input: packages (string[])
Returns: Complete dependency tree analysis

npmTypes

Check TypeScript support
Input: packages (string[])
Returns: TypeScript compatibility status

npmSize

Analyze package size
Input: packages (string[])
Returns: Bundle size and import cost analysis

npmVulnerabilities

Scan for security vulnerabilities
Input: packages (string[])
Returns: Security advisories and severity ratings

npmTrends

Get download trends
Input:
- packages (string[])
- period ("last-week" | "last-month" | "last-year")
Returns: Download statistics over time

npmCompare

Compare multiple packages
Input: packages (string[])
Returns: Detailed comparison metrics

npmMaintainers

Get package maintainers
Input: packages (string[])
Returns: Maintainer information and activity

npmScore

Get package quality score
Input: packages (string[])
Returns: Comprehensive quality metrics

npmPackageReadme

Get package README
Input: packages (string[])
Returns: Formatted README content

npmSearch

Search for packages
Input:
- query (string)
- limit (number, optional)
Returns: Matching packages with metadata

npmLicenseCompatibility

Check license compatibility
Input: packages (string[])
Returns: License analysis and compatibility info

npmRepoStats

Get repository statistics
Input: packages (string[])
Returns: GitHub/repository metrics

npmDeprecated

Check for deprecation
Input: packages (string[])
Returns: Deprecation status and alternatives

npmChangelogAnalysis

Analyze package changelogs
Input: packages (string[])
Returns: Changelog summaries and impact analysis

npmAlternatives

Find package alternatives
Input: packages (string[])
Returns: Similar packages with comparisons

npmQuality

Assess package quality
Input: packages (string[])
Returns: Quality metrics and scores

npmMaintenance

Check maintenance status
Input: packages (string[])
Returns: Maintenance activity metrics

Build

# Build with npm
npm install
npm run build

License

This MCP server is licensed under the MIT License. This means you are free to use, modify, and distribute the software, subject to the terms and conditions of the MIT License. For more details, please see the LICENSE file in the project repository.

MIT © nekzus

Deploy Server

HTTP connection URL

security – no known vulnerabilities

license - permissive license

quality - confirmed to work

How are these scores calculated?

hybrid server

The server is able to function both locally and remotely, depending on the configuration or use case.

Tools

View all tools

强大的模型上下文协议 (MCP) 服务器，通过 AI 革新 NPM 包分析。它与 Claude 和 Anthropic AI 集成，提供有关包安全性、依赖项和性能的实时情报。这款 MCP 服务器提供即时洞察和智能分析，以保护和优化您的 npm 生态系统，使现代开发工作流程中更快、更安全地进行包管理决策。

Related MCP Servers

NPM MCP Server
mateusribeirocampos
A
security
F
license
A
quality
A Model Context Protocol server that allows AI models to fetch detailed information about npm packages and discover popular packages in the npm ecosystem.
Last updated -
1
3
1
NPM Sentinel MCP
Nekzus
A
security
A
license
A
quality
A Model Context Protocol server that enables AI-powered analysis of NPM packages through multiple tools for security vulnerability scanning, dependency analysis, package comparison, and quality assessment.
Last updated -
19
662
6
TypeScript
MIT License
NPM Helper MCP
pinkpixel-dev
-
security
A
license
-
quality
A Model Context Protocol server that provides tools for NPM package management, including dependency searching, updates, conflict resolution, and version management to help AI assistants safely upgrade project dependencies.
Last updated -
532
6
MIT License
AgentModeofficial
agentmode
A
security
F
license
A
quality
An all-in-one Model Context Protocol (MCP) server that connects your coding AI to numerous databases, data warehouses, data pipelines, and cloud services, streamlining development workflow through seamless integrations.
Last updated -
3

View all related MCP servers

NPM Sentinel MCP

Features

Installation

Install in VS Code

Docker

Build

Usage

Usage with Claude Desktop

NPX

API

Resources

Server Resources

Tools

npmVersions

npmLatest

npmDeps

npmTypes

npmSize

npmVulnerabilities

npmTrends

npmCompare

npmMaintainers

npmScore

npmPackageReadme

npmSearch

npmLicenseCompatibility

npmRepoStats

npmDeprecated

npmChangelogAnalysis

npmAlternatives

npmQuality

npmMaintenance

Build

License

Tools

Related MCP Servers

NPM MCP Server

NPM Sentinel MCP

NPM Helper MCP

AgentModeofficial

Appeared in Searches

New MCP Servers

MCP directory API