Best Composer MCP Servers
Composer is a dependency manager for PHP that allows you to declare the libraries your project depends on and manages them for you.
Why this server?
Audits PHP projects using Composer, including PSR-4 autoloading and PHPUnit test configuration.
AlicenseAqualityAmaintenanceocal-first, read-only MCP server that audits repository test architecture across ten language ecosystems. It returns deterministic evidence-backed findings, blockers, rankings, and repository-native test plans without modifying source files.219144MITWhy this server?
Scans composer.lock files to detect known vulnerabilities in PHP dependencies and recommend fix versions.
AlicenseAqualityAmaintenanceAn MCP server that scans your lockfiles (npm, PyPI, Go, Rust, Ruby, PHP) for known vulnerabilities, enriches with EPSS exploit probability scores, and recommends fix versions. $14/mo — not per-seat.91MITWhy this server?
Enables Composer to install packages from private repositories over SSH by loading the correct SSH keys into the agent and diagnosing authentication failures.
AlicenseAqualityAmaintenanceEnables secure remote command execution and file operations over SSH/SFTP with automatic authentication resolution. Features built-in diagnostics that identify connection issues—such as stale host keys, unloaded agents, or permission errors—and provide specific commands to fix them.214804MITWhy this server?
Allows configuring Composer install to run during deployments.
AlicenseBqualityDmaintenanceEnables AI assistants to fully manage Laravel Forge servers, sites, databases, workers, daemons, SSL certificates, and deployments.39890MITWhy this server?
Scans composer.json files to automatically detect and integrate PHP project stack details into the FAF context.
AlicenseAqualityAmaintenancePersistent project context for Google Gemini. 12 MCP tools for .faf Project DNA — auto-detect your stack, validate, score, and sync across CLAUDE.md, GEMINI.md, and AGENTS.md. Python/FastMCP. IANA-registered format (application/vnd.faf+yaml). 183 tests. One file, every AI platform.122MITWhy this server?
Allows spawning and interacting with Composer agents via persistent terminal sessions, enabling AI-driven orchestration of Composer's coding capabilities.
AlicenseAqualityAmaintenancePersistent tmux-backed MCP server that lets Claude Code control Codex CLI's interactive TUI, including slash commands and $imagegen. Run local shells, SSH, Docker, WSL, REPLs, and supported coding agents through durable PTY sessions.131,2433MITWhy this server?
Provides a tool to run Composer install for managing PHP dependencies in approved projects.
AlicenseBqualityBmaintenanceA guarded Model Context Protocol server that lets AI assistants inspect, edit, test, and validate explicitly approved local software projects, featuring 49 focused MCP tools for project discovery, safe editing, Git inspection, Laravel integration testing, and more.491MITWhy this server?
Allows executing Composer commands within the DDEV web service container for dependency management.
AlicenseAqualityDmaintenanceEnables AI assistants to interact with DDEV local development environments by querying databases, managing project states, and executing container commands. It provides comprehensive control over local services with a security-first approach using whitelisted operations.5493GPL 2.0Why this server?
Manages Composer dependencies including validation, security audit, package installation, and updates.
AlicenseBqualityCmaintenanceEnables AI assistants to deeply interact with the PHP ecosystem, including runtime, static analysis, security scanning, testing, Composer, and frameworks like Laravel and Symfony. It exposes over 30 tools, 8 resources, and 7 prompts via MCP, allowing natural language commands to run PHP linting, static analysis, audits, tests, and project initialization.41MIT