pkgintel-mcp

pkgintel-mcp is a keyless, read-only Model Context Protocol connector for package intelligence across npm, PyPI, Cargo, Go, Maven, NuGet, and RubyGems. It reads public metadata from deps.dev v3, OSV.dev, the npm registry, the PyPI JSON API, the crates.io API, and the OpenSSF Scorecard API. Every tool is read-only. The server speaks stdio, and it can serve stateless Streamable HTTP on 127.0.0.1 only.

A package record carries a normalized ecosystem and name, versions, latest and default version, SPDX licence strings, links, deprecation, advisories, and SLSA or provenance when deps.dev provides them. Names are normalized per ecosystem (PyPI follows PEP 503). One failed upstream does not drop the others. Each source has a waiting scheduler so this process keeps the published gap instead of bursting.

Connects to: public package data services (deps.dev, OSV.dev, the npm registry, PyPI, crates.io, and OpenSSF Scorecard). No API key is needed.

By Issah Abubakari (@si-essence). Also listed on Bot Essentials.

Requirements

• Node.js 20 or newer (CI uses Node.js 22)

• npm

Related MCP server: mcp-dependency-version

Tools

Lockfile formats: package-lock.json v2/v3, pinned requirements.txt (name==version only), Cargo.lock, go.sum. Text cap 2,000,000 characters. Package cap 1,500.

Tool errors use these prefixes and name the source: [invalid-input], [not-found], [rate-limited], [upstream], [timeout], [config]. Messages do not include stack traces or secret values.

Setup

From a clone of this repository:

npm ci
npm run ci          # typecheck, lint, test, build
npm start           # stdio
npm run start:http  # http://127.0.0.1:3000/mcp and /health
node scripts/live-check.mjs   # optional, calls the real public APIs

{
  "mcpServers": {
    "pkgintel-mcp": {
      "command": "node",
      "args": ["/path/to/pkgintel-mcp/dist/index.js"],
      "env": {
        "PKGINTEL_CONTACT": "contact@example.com"
      }
    }
  }
}

Docker binds HTTP with no authentication. Keep the port on localhost.

docker build -t pkgintel-mcp .
docker run -p 3000:3000 -e PKGINTEL_CONTACT=contact@example.com pkgintel-mcp

The image sets PKGINTEL_CONTACT=contact@example.com. Override it with an address you control. Do not bake a personal address into the image.

Environment

Invalid values are reported by field name and issue code. The rejected value is not included in the error.

The User-Agent is pkgintel-mcp/0.1.0 (mailto:<PKGINTEL_CONTACT>).

Sources and terms

Checked on 2026-10-20. The rate column is what this process enforces. A source is included only when its terms allow a commercially distributable wrapper that returns metadata.

Excluded sources

npms.io is not used. This connector does not depend on that service.

RubyGems.org's own API is unused. RubyGems data comes through deps.dev, which indexes RubyGems.

Maven Central, NuGet.org, and proxy.golang.org are unused as direct HTTP sources. Those ecosystems are served through deps.dev.

Attribution

Package intelligence includes data from Open Source Insights (deps.dev). Generated deps.dev data is licensed under CC-BY 4.0. Advisory records come from OSV.dev and the upstream databases it aggregates, including the GitHub Advisory Database (CC-BY 4.0). npm public registry metadata is used under the npm Open Source Terms. PyPI JSON metadata is used under the PyPI Terms of Service. crates.io API metadata is used under the crates.io crawler policy. OpenSSF Scorecard data is used under CDLA Permissive 2.0. None of these providers endorse this project.

Limits and caveats

• deps.dev licence strings are SPDX 2.1 expressions when known, or non-standard. They are not legal advice.

• OSV /v1/querybatch returns ids. This connector hydrates at most 25 full advisory records per call.

• audit_lockfile licence counts come from fields present in the lockfile. It does not fetch a licence for every package from deps.dev.

• requirements.txt lines must be pinned with ==. Ranges, VCS urls, and -r includes are skipped.

• PyPI search is skipped with an explicit reason. Look up an exact name with get_package.

• Scorecard currently resolves github.com/org/repo. GitLab and Bitbucket project ids from deps.dev are returned as links, not Scorecard reports.

• Retries run on 429, 5xx, timeout, and network errors, with bounded backoff and jitter, up to 3 attempts. Retry-After is honoured. Other 4xx responses, HTML bodies, and redirects are not retried.

• The cache and the inbound window live in the process. They disappear on exit.

• contact@example.com is a placeholder. Set PKGINTEL_CONTACT to an address you control.

Running the tests

The tests use mocked upstream responses. They need no API key and make no network calls to the package services.

npm ci
npm test        # unit and tool tests (vitest)
npm run ci      # typecheck, lint, tests, and build

At the time of this commit, npm test reports 51 passing tests.

The live check writes its table to live-check-report.txt in the current folder, or to the path in PKGINTEL_LIVE_CHECK_REPORT. That file is ignored by git.

Author

Issah Abubakari (@si-essence).

This connector is also listed on Bot Essentials.

Licence

MIT. See LICENSE. The data licences above are separate from the MIT licence on this code.