Best Dependabot MCP Servers
Dependabot is a GitHub service that automates dependency updates in software projects by creating pull requests when new versions of dependencies are available, helping developers keep their projects secure and up-to-date.
Why this server?
Gates Dependabot bump PRs by replaying recorded skill workflows against the updated dependency, detecting drifts in tool-call behavior without LLM calls.
AlicenseAqualityBmaintenanceRecord an agent's MCP tool-call workflow once, replay it deterministically for zero tokens, and get a receipt — a snapshot-testing and deterministic-execution layer for Agent Skills.Last updated51,6842MITWhy this server?
Enables querying of Dependabot alerts for GitHub repositories, providing visibility into dependency vulnerabilities
AlicenseBqualityFmaintenanceThis server integrates with GitHub Advanced Security to load security alerts and bring it into your context. Supports Dependabot Security Alerts, Secret Scanning Alerts, Code Security AlertsLast updated375MITWhy this server?
Surfaces security alerts and CVE warnings by integrating with Dependabot and the GitHub Advisory Database.
AlicenseBqualityDmaintenanceProvides crowdsourced package intelligence and security alerts for AI coding assistants by analyzing project dependencies and framework co-occurrence. It enables automated project scans, package alternative discovery, and data-driven recommendations across multiple programming ecosystems.Last updated1054MITWhy this server?
Provides automated triage for Dependabot alerts and pull requests as part of a headless workflow for maintaining open-source repositories.
AlicenseAqualityCmaintenanceOpen source contribution manager — tracks PRs across repos, discovers contributable issues, diagnoses CI failures, and drafts maintainer responses. 21 MCP tools, 5 resources, 3 prompts. Ships as CLI, MCP server, and Claude Code plugin.Last updated2011MITWhy this server?
Used for proactive dependency updates as part of the enterprise-grade quality measures, including OpenSSF Scorecard monitoring and Dependabot updates.
AlicenseBqualityDmaintenanceA local-first MCP server that provides AI agents with safe codebase access through file discovery, hybrid lexical-semantic search, and project introspection. It features durable local memory and semantic indexing while keeping all data and processing entirely on your local machine.Last updated74535MITWhy this server?
Allows listing Dependabot alerts with severity-grouped counts.
AlicenseBqualityAmaintenanceSelf-hosted GitHub MCP server for PR, repo file, and Dependabot operations, supporting multiple MCP clients with personal access token auth.Last updated7MITWhy this server?
Analyzes Dependabot pull requests to provide human-readable upgrade plans with risk assessment, breaking changes, security fixes, and migration guidance
AlicenseAqualityCmaintenanceTranslates a lockfile diff into a human-readable upgrade plan. For every dependency bump (npm or PyPI) returns semver class, breaking changes from GitHub release notes, CVEs fixed in the range, migration guide links, and a clear per-package recommendation. Bulk tool ranks up to 50 package changes in parallel by risk (security > caution > review > likely-safe > safe).Last updated2222MITWhy this server?
Configures Dependabot for automated dependency updates in the generated project.
AlicenseAqualityAmaintenanceBackGen's MCP server lets AI assistants scaffold production-ready Express.js + TypeScript backend projects with your choice of ORM (Prisma, Drizzle, Mongoose), install auth/payment/storage plugins, generate CRUD resources, and run health checks — all through natural language conversation.Last updated101554MITWhy this server?
Integrates Dependabot vulnerability alerts for security triage and risk assessment.
AlicenseAqualityBmaintenanceEnables AI coding agents to orchestrate the full software development lifecycle on GitHub, including planning, issue creation, code review, security triage, and release readiness checks.Last updated121,0241MIT