Best Packagist MCP Servers
Packagist is the main Composer repository for PHP packages, allowing developers to discover, share and manage dependencies for PHP projects
Why this server?
Checks Packagist for vendors and packages with the given name, reporting when a vendor has no packages or its packages are frozen.
AlicenseAqualityBmaintenanceChecks whether a project name is free across package registries, app stores, agent and editor plugin directories, GitHub, and domains, applying each registry's own rules for similar, reserved, alias, and recently deleted names. Reports the evidence and confidence behind every answer so agents can distinguish available names (or probably available ones) from taken, unavailable, or unknown results.181MITWhy this server?
Indexes executable names declared in `composer.json` `bin` fields via Packagist metadata, so agents can check command-name collisions against PHP packages.
AlicenseAqualityAmaintenanceCheck whether a CLI command name is already taken across npm, PyPI, crates.io, Go, Debian and more41028 PyPIMITWhy this server?
Provides release history for Packagist packages, including available versions, prerelease and withdrawn flags, and changelog-style differences between version ranges.
AlicenseAqualityCmaintenanceEnables coding agents to query package release histories, version lists, and change summaries across PyPI, npm, crates.io, Packagist, NuGet, pub.dev, Go, and Maven Central to inform dependency upgrades and detect withdrawn versions.5MITWhy this server?
Enables looking up PHP package data, dependencies, and repository information from the Packagist registry.
AlicenseAqualityBmaintenanceEnables querying package ecosystem data from ecosyste.ms, including package metadata, versions, security advisories, dependencies, and repository information across 40+ package registries with fast local SQLite lookups and API fallback.1021 npm9MITWhy this server?
Offers package vulnerability details, dependency trees, and licensing checks for PHP packages from Packagist.

DataNexus MCPofficial
AlicenseAqualityCmaintenanceProvides AI-ready access to US/UK nonprofit data and OSS vulnerability intelligence via MCP, with 10 tools and no API key required.55137 npm3Business Source 1.1Why this server?
Looks up package versions from Packagist (PHP Composer).
Why this server?
Scans PHP dependencies from composer.json against Packagist packages for known vulnerabilities via OSV.dev.
AlicenseBqualityDmaintenanceUniversal AI security layer for code scanning, PII detection, prompt injection defense, secret detection, dependency auditing, and audit logging.2716 PyPI3Apache 2.0Why this server?
Provides tools for querying Packagist package metadata and security information.
AlicenseBqualityCmaintenanceUnifies 21 supply chain security data sources into a single MCP server, enabling AI agents to perform comprehensive package audits, vulnerability checks, provenance verification, and risk assessment across multiple ecosystems.90145 npm4MITWhy this server?
Checks Packagist/PHP package dependencies for known vulnerabilities against the OSV.dev database.
AlicenseAqualityAmaintenanceEnables AI agents to submit npm, PyPI, Go, or Maven packages and manifests to the free OSV.dev database and receive per-package and per-advisory results with CVE mappings, CVSS scores, severities, and the versions that fix each issue. It also supports filtering by minimum severity, de-duplicating alias advisories, and machine-readable error/warning rows for CI gates and upgrade recommendations.3MIT