How do I use Depfender MCP Server?

1. Click on "Install Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@Depfender MCP Server scan the npm package express for security threats" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

Depfender MCP Server by depfenderdev

Installation

Cursor

Add to your Cursor MCP settings:

{
  "mcpServers": {
    "depfender": {
      "command": "npx",
      "args": ["@depfenderdev/mcp"]
    }
  }
}

Claude Code

claude mcp add depfender -- npx @depfenderdev/mcp

VS Code

Add to your VS Code MCP settings (.vscode/mcp.json):

{
  "mcpServers": {
    "depfender": {
      "command": "npx",
      "args": ["@depfenderdev/mcp"]
    }
  }
}

Tools

`scan_package`

Scans a package for data exfiltration and security threats.

Parameters:

package (required) — package name (e.g., lodash)
version (optional) — version to scan (defaults to latest)
ecosystem (optional) — package ecosystem: npm, pypi, cargo, maven (default: npm)

Development

Setup

npm install
npm run build

Environment Variables

Variable	Required	Description
`DEPFENDER_API_URL`	Yes	Backend API URL (e.g., `http://localhost:3000`)
`DEPFENDER_API_KEY`	Yes	Backend API secret (`x-internal-secret` value)

Local IDE Configuration

Add to your MCP settings (e.g., Claude Desktop claude_desktop_config.json):

{
  "mcpServers": {
    "depfender": {
      "command": "node",
      "args": ["/path/to/mcp/dist/index.js"],
      "env": {
        "DEPFENDER_API_URL": "http://localhost:3000",
        "DEPFENDER_API_KEY": "your-api-secret"
      }
    }
  }
}

Testing

npm test                    # Run all tests
npm run test:watch          # Watch mode

E2E tests require DEPFENDER_API_KEY and a running backend:

DEPFENDER_API_KEY=your-secret DEPFENDER_API_URL=http://localhost:3000 npm test

Scripts

npm run dev                 # Run with tsx (no build needed)
npm run build               # Compile TypeScript

Community

GitHub Discussions — Questions and ideas
Twitter/X — Updates and announcements
Website — Full documentation

License

MIT

This server cannot be installed

-

security - not tested

A

license - permissive license

-

quality - not tested

How are these scores calculated?

Resources

GitHub Repository

Need Help?

Report Issue

Related Servers

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Depfender MCP Server