Best Composer MCP Servers
Composer is a dependency manager for PHP that allows you to declare the libraries your project depends on and manages them for you.
Why this server?
Allows configuring Composer install to run during deployments.
AlicenseBqualityDmaintenanceEnables AI assistants to fully manage Laravel Forge servers, sites, databases, workers, daemons, SSL certificates, and deployments.391,188 npmMITWhy this server?
Provides crowdsourced package intelligence, trends, and health data for PHP projects using the Composer ecosystem.
AlicenseBqualityDmaintenanceProvides crowdsourced package intelligence and security alerts for AI coding assistants by analyzing project dependencies and framework co-occurrence. It enables automated project scans, package alternative discovery, and data-driven recommendations across multiple programming ecosystems.104 npmMITWhy this server?
Analyzes composer.json and composer.lock files to extract project metadata and identify known vulnerabilities (CVEs) in project dependencies.
AlicenseAqualityDmaintenanceA security audit server for Laravel projects that performs static code analysis, dependency CVE checks, and configuration audits. It enables developers to detect vulnerabilities like SQL injection and XSS while providing active attack simulations directly within MCP-compatible IDEs.82AGPL 3.0Why this server?
Scans composer.json files to automatically detect and integrate PHP project stack details into the FAF context.
AlicenseAqualityAmaintenancePersistent project context for Google Gemini. 12 MCP tools for .faf Project DNA — auto-detect your stack, validate, score, and sync across CLAUDE.md, GEMINI.md, and AGENTS.md. Python/FastMCP. IANA-registered format (application/vnd.faf+yaml). 183 tests. One file, every AI platform.13171 PyPI2MITWhy this server?
Allows running Composer commands like install and update within RollDev project environments to manage PHP dependencies.
AlicenseBqualityCmaintenanceAn MCP server for RollDev and Magento 2 development environments that enables LLMs to manage project environments, execute SQL queries, and run PHP or Magento CLI commands. It supports automated project initialization, Composer integration, and system service control directly through natural language.105 npmMITWhy this server?
Scans composer.lock files to detect known vulnerabilities in PHP dependencies and recommend fix versions.
AlicenseAqualityBmaintenanceAn MCP server that scans your lockfiles (npm, PyPI, Go, Rust, Ruby, PHP) for known vulnerabilities, enriches with EPSS exploit probability scores, and recommends fix versions. $14/mo — not per-seat.91MITWhy this server?
Enables Composer to install packages from private repositories over SSH by loading the correct SSH keys into the agent and diagnosing authentication failures.
AlicenseAqualityAmaintenanceEnables secure remote command execution and file operations over SSH/SFTP with automatic authentication resolution. Features built-in diagnostics that identify connection issues—such as stale host keys, unloaded agents, or permission errors—and provide specific commands to fix them.211,005 npm5MITWhy this server?
Provides a tool to run Composer install for managing PHP dependencies in approved projects.
AlicenseBqualityBmaintenanceA guarded Model Context Protocol server that lets AI assistants inspect, edit, test, and validate explicitly approved local software projects, featuring 49 focused MCP tools for project discovery, safe editing, Git inspection, Laravel integration testing, and more.491MITWhy this server?
Queries Packagist for the latest version of PHP packages.
AlicenseAqualityCmaintenanceAn MCP server that queries 19 package registries (npm, PyPI, crates.io, etc.) to retrieve the latest version of packages and their metadata.211MIT