Best npm MCP Servers
npm is the world's largest software registry, used by JavaScript developers to share and borrow packages for their projects.
Why this server?
Allows grading MCP servers published on npm by referencing their npm package identifier.
AlicenseAqualityAmaintenanceOpen behavioral litmus for MCP servers — grades A–F across tool-output injection, egress, sensitive-data, and adversarial-input, with reproducible, content-addressed evidence. Tools: run_litmus, verify_attestation.Last updated124867Apache 2.0Why this server?
Provides vulnerability intelligence, dependency graph analysis, and license information for npm packages using OSV.dev, NVD, and deps.dev APIs.

DataNexus MCPofficial
AlicenseAqualityAmaintenanceProvides AI-ready access to US/UK nonprofit data and OSS vulnerability intelligence via MCP, with 10 tools and no API key required.Last updated12551862SleepycatWhy this server?
Supports installation and building of the MCP server through npm package management, with commands for dependencies, building, and running the inspector.

gotoHuman MCPofficial
AlicenseAqualityDmaintenanceAdd human approval steps to your AI agents and automations with gotoHuman.Last updated38653MITWhy this server?
Distributed as an npm package for easy installation and dependency management.
AlicenseBqualityCmaintenanceEnables Claude to search and manage electronic components, PCB parts, and manufacturing services through direct access to the Source Parts API. Provides comprehensive product search, pricing, inventory checking, and parametric filtering capabilities for electronics procurement.Last updated1001Apache 2.0Why this server?
Available as an npm package (@debugg-ai/debugg-ai-mcp) for easy installation and integration
Apache 2.0Why this server?
Allows installation and execution of the MCP server through npm, either globally or via npx.
AlicenseAqualityCmaintenanceAn MCP server implementation that integrates the SearXNG API for powerful web search capabilities and uses @missionsquad/puppeteer-scraper to read and process live web content.Last updated233MITWhy this server?
Allows checking if a specific npm package is used across repositories and developer machines, useful for supply-chain incident response.

stepsecurity-mcpofficial
AlicenseAqualityDmaintenanceMCP server for the StepSecurity platform that enables investigating supply-chain and CI/CD security issues through natural language.Last updated3063Apache 2.0Why this server?
Allows installation and execution of the MCP server through npm, supporting both global and local installation patterns.

Vendure MCP Serverofficial
AlicenseBqualityFmaintenanceA standalone server that enables programmatic interaction with Vendure CLI commands, allowing external MCP clients to automate and integrate with Vendure e-commerce projects through command execution and project analysis.Last updated74112MITWhy this server?
Allows injecting secrets into npm configuration by writing to ~/.npmrc, enabling agents to manage npm authentication tokens securely.

wundervaultofficial
AlicenseAqualityAmaintenanceMCP server for Wundervault zero-knowledge secret management. Exposes vault secrets to AI agents via the Model Context Protocol — secrets are decrypted server-side and never returned to the agent in plaintext.Last updated61232AGPL 3.0