Best Composer MCP Servers
Composer is a dependency manager for PHP that allows you to declare the libraries your project depends on and manages them for you.
Why this server?
Audits PHP projects using Composer, including PSR-4 autoloading and PHPUnit test configuration.
AlicenseAqualityAmaintenanceocal-first, read-only MCP server that audits repository test architecture across ten language ecosystems. It returns deterministic evidence-backed findings, blockers, rankings, and repository-native test plans without modifying source files.219141MITWhy this server?
Queries Packagist for the latest version of PHP packages.
AlicenseAqualityCmaintenanceAn MCP server that queries 19 package registries (npm, PyPI, crates.io, etc.) to retrieve the latest version of packages and their metadata.211MITWhy this server?
Allows running Composer commands like install and update via ddev_exec.
AlicenseAqualityCmaintenanceEnables AI assistants to automate DDEV development environments, including project management, database operations, and executing commands for various CMS frameworks.143913GPL 2.0Why this server?
Manages Composer (PHP) dependencies and runs audit.
AlicenseAqualityDmaintenanceComprehensive dependency audit MCP server supporting 9 languages and 23 tools for scanning, updating, security auditing, and migration detection.2524MITWhy this server?
Provides dependency auditing for Composer projects by analyzing composer.lock files to identify known vulnerabilities.
AlicenseAqualityDmaintenanceProvides verified dependency-audit verdicts for AI agents, checking installed versions against OSV advisories and splitting direct vs transitive dependencies.3MITWhy this server?
Parses composer.json manifests to extract Packagist dependency trees for vulnerability scanning against OSV.dev.
AlicenseBqualityDmaintenanceUniversal AI security layer for code scanning, PII detection, prompt injection defense, secret detection, dependency auditing, and audit logging.273Apache 2.0Why this server?
Allows configuring Composer install to run during deployments.
AlicenseBqualityDmaintenanceEnables AI assistants to fully manage Laravel Forge servers, sites, databases, workers, daemons, SSL certificates, and deployments.391,237MITWhy this server?
Provides crowdsourced package intelligence, trends, and health data for PHP projects using the Composer ecosystem.
AlicenseBqualityDmaintenanceProvides crowdsourced package intelligence and security alerts for AI coding assistants by analyzing project dependencies and framework co-occurrence. It enables automated project scans, package alternative discovery, and data-driven recommendations across multiple programming ecosystems.1022MITWhy this server?
Analyzes composer.json and composer.lock files to extract project metadata and identify known vulnerabilities (CVEs) in project dependencies.
AlicenseAqualityDmaintenanceA security audit server for Laravel projects that performs static code analysis, dependency CVE checks, and configuration audits. It enables developers to detect vulnerabilities like SQL injection and XSS while providing active attack simulations directly within MCP-compatible IDEs.82AGPL 3.0