What can you do with this server?

This server provides comprehensive supply chain security intelligence, unifying 21 data sources into a single MCP interface for AI agents to perform full-spectrum package and vulnerability analysis. Vulnerability & Threat Intelligence * Query OSV, GHSA, NVD, and Go Vulnerability Database for known CVEs by package, commit hash, or PURL * Get EPSS exploit prediction scores (single, batch, or threshold-filtered) and check CISA Known Exploited Vulnerabilities (KEV) catalog Package Registry Metadata * Fetch metadata, version histories, maintainers, download stats, and lifecycle scripts across 7 ecosystems: npm, PyPI, crates.io, RubyGems, NuGet, Packagist, and Go module proxy * npm extras: provenance attestations, bulk audit, and download anomaly detection Dependency Analysis * Explore dependency trees, reverse dependencies, similar packages, and version requirements via deps.dev and Libraries.io (including SourceRank quality scores) Provenance & Integrity * Verify npm Sigstore provenance, search/verify Rekor transparency log entries by email, hash, or public key, and validate Go module checksums Security Posture & Quality * Assess OpenSSF Scorecard scores (with side-by-side repo comparison), Best Practices badge status, and Repology distribution packaging issues Typosquatting Detection * Detect suspicious package names using Levenshtein distance (≤ 2) against popular packages and warn about confusable characters License Compliance * Look up curated license data from ClearlyDefined for individual packages or in batch Aggregated Workflows * Composite tools (vuln_scan, package_info, dep_tree, security_check, quality, license) run multiple sources in parallel for unified risk assessment * List all 21 data sources with configuration status and required API keys

Which integrations are available for this server?

Provides tools for querying GitHub Security Advisories (GHSA) and leveraging GitHub API for enhanced rate limits on vulnerability and security data. Provides tools for querying Libraries.io to obtain dependency metrics, source rank, and library intelligence across multiple ecosystems. Provides tools for querying npm package metadata, including package details, provenance verification, and security advisory information. Provides tools for querying NuGet package metadata and associated vulnerability data. Provides tools for querying Packagist package metadata and security information. Provides tools for querying PyPI package metadata and vulnerability information. Provides tools for querying RubyGems package metadata and security advisories.

How do I use supply-chain-mcp-server?

1. Click on "Deploy Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@supply-chain-mcp-server audit package express 4.18.2 for vulnerabilities" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

supply-chain-mcp-server

by badchars

Overview Schema Source Related Servers Discussions Admin

TypeScript

Remote

The Problem

Supply chain security intelligence is the missing layer in modern software development. Vulnerability databases, package registries, provenance verification, exploit prediction scoring, license compliance, security scorecards, typosquatting detection — the data you need is scattered across dozens of platforms, each with its own API, its own auth, its own rate limits, its own output format. Today you check OSV in one tab, NVD in another, pull up npm advisories, check EPSS scores on FIRST.org, verify Sigstore provenance in yet another tab, look up OpenSSF Scorecard, cross-reference CISA KEV, and then spend an hour manually piecing it all together.

Traditional supply chain security workflow:
  check vulnerabilities            ->  OSV + NVD + GitHub Advisories (3 separate UIs)
  assess exploit likelihood        ->  EPSS scores (separate API)
  check active exploitation        ->  CISA KEV catalog (separate JSON feed)
  verify package provenance        ->  Sigstore/Rekor + npm attestations (multiple CLIs)
  check security practices         ->  OpenSSF Scorecard + Best Practices Badge (2 UIs)
  audit dependencies               ->  deps.dev + Libraries.io (2 more UIs)
  check registry metadata          ->  npm + PyPI + crates.io + Go (4 registries)
  check for typosquatting          ->  manual name comparison (error-prone)
  verify license compliance        ->  ClearlyDefined (another UI)
  check distro packaging           ->  Repology (yet another UI)
  ────────────────────────────────
  Total: 45+ minutes per package audit, most of it switching contexts

supply-chain-mcp-server gives your AI agent 7 composite tools (orchestrating 90 techniques internally) across 21 data sources via the Model Context Protocol. The agent calls a single tool like vuln_scan or package_info, which automatically fans out to the right techniques in parallel, correlates vulnerability data with exploit predictions, verifies provenance, checks security posture, and presents a unified supply chain risk assessment — in a single conversation.

With supply-chain-mcp-server:
  You: "Audit the security posture of the express npm package"

  Agent: -> vuln_scan(mode:"package", ecosystem:"npm", name:"express")
            internally runs: osv_query + ghsa_package + epss_batch + kev_lookup
         -> package_info(ecosystem:"npm", name:"express", version:"4.21.2")
            internally runs: npm_package + npm_downloads + npm_maintainers + npm_scripts + npm_provenance
         -> quality(mode:"scorecard", owner:"expressjs", repo:"express")
            internally runs: scorecard_repo
         -> "express has a strong security posture. 2 known vulns but
            neither actively exploited (not in KEV). High EPSS on one
            CVE warrants patching priority. Provenance verified via
            Sigstore. OpenSSF Scorecard 8.2/10."

Related MCP server: DepScope

How It's Different

Existing tools give you raw data one source at a time. supply-chain-mcp-server gives your AI agent the ability to reason across vulnerability, provenance, and package intelligence simultaneously.

Quick Start

Option 1: npx (no install)

npx supply-chain-mcp-server

7 composite tools (90 techniques) work immediately. No API keys required for most data sources — 18 of 21 sources are fully free.

Option 2: Clone

git clone https://github.com/badchars/supply-chain-mcp-server.git
cd supply-chain-mcp-server
bun install

Environment variables (optional)

export GITHUB_TOKEN=your-token        # GHSA + Scorecard higher rate limits
export LIBRARIES_API_KEY=your-key     # Required for Libraries.io tools
export NVD_API_KEY=your-key           # 50 req/30s vs 5 req/30s without key

All API keys are optional. Without them, you still get 6 of 7 composite tools fully operational — only Libraries.io (within dep_tree) requires an API key.

Connect to your AI agent

# With npx
claude mcp add supply-chain-mcp-server -- npx supply-chain-mcp-server

# With local clone
claude mcp add supply-chain-mcp-server -- bun run /path/to/supply-chain-mcp-server/src/index.ts

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "supply-chain": {
      "command": "npx",
      "args": ["-y", "supply-chain-mcp-server"],
      "env": {
        "GITHUB_TOKEN": "optional",
        "LIBRARIES_API_KEY": "optional",
        "NVD_API_KEY": "optional"
      }
    }
  }
}

Same JSON config format. Point the command to npx supply-chain-mcp-server or your local installation path.

Start querying

You: "Check if express@4.17.1 has any known vulnerabilities and verify its provenance"

That's it. The agent handles vulnerability lookups, EPSS scoring, KEV checks, provenance verification, and more automatically.

What The AI Can Do

Full Package Audit

You: "Do a complete security audit of the lodash npm package"

Agent: -> vuln_scan {mode: "package", ecosystem: "npm", name: "lodash"}
          ↳ osv_query + ghsa_package + epss_batch + kev_lookup (parallel)
       -> package_info {ecosystem: "npm", name: "lodash", version: "4.17.21"}
          ↳ npm_package + npm_downloads + npm_maintainers + npm_scripts + npm_provenance + npm_attestations + npm_audit_bulk (parallel)
       -> quality {mode: "scorecard", owner: "lodash", repo: "lodash"}
          ↳ scorecard_repo
       -> license {mode: "lookup", type: "npm", name: "lodash", version: "4.17.21"}
          ↳ license_lookup
       -> "lodash@4.17.21 security audit:
          Vulnerabilities: 3 historical (all fixed in 4.17.21),
          including prototype pollution CVE-2020-8203.
          Provenance: No Sigstore attestation (published pre-provenance era).
          OpenSSF Scorecard: 6.1/10 — no branch protection, no fuzzing.
          Dependencies: Zero runtime deps (self-contained).
          License: MIT (ClearlyDefined confirmed).
          Lifecycle scripts: None — clean.
          Recommendation: Safe to use at latest version. Consider
          migrating to lodash-es for tree-shaking."

Vulnerability Triage

You: "Triage CVE-2024-3094 — how urgent is this?"

Agent: -> vuln_scan {mode: "cve", cve_id: "CVE-2024-3094"}
          ↳ nvd_cve + osv_id + ghsa_id + epss_score + kev_lookup (parallel)
       -> "CVE-2024-3094 (xz-utils backdoor):
          CVSS: 10.0 Critical — backdoor in xz-utils 5.6.0/5.6.1
          EPSS: 0.95 (99th percentile) — extremely likely to be exploited
          CISA KEV: YES — actively exploited, deadline March 2024
          Affects: xz-utils/liblzma on Linux (sshd via systemd)
          This is CRITICAL. Immediate action required:
          1. Downgrade xz-utils to 5.4.x or remove 5.6.0/5.6.1
          2. Check all systems for affected versions
          3. This was a sophisticated supply chain attack via
             a compromised maintainer."

Dependency Risk Assessment

You: "Assess the supply chain risk of adding fastapi to our Python project"

Agent: -> package_info {ecosystem: "pypi", name: "fastapi"}
          ↳ pypi_package + pypi_releases + pypi_maintainers (parallel)
       -> vuln_scan {mode: "package", ecosystem: "PyPI", name: "fastapi"}
          ↳ osv_query + ghsa_package + epss + kev (parallel)
       -> dep_tree {mode: "dependencies", ecosystem: "pypi", name: "fastapi", version: "0.115.0"}
          ↳ deps_dependencies + deps_requirements + libraries_deps (parallel)
       -> quality {mode: "full", owner: "tiangolo", repo: "fastapi", repo_url: "https://github.com/tiangolo/fastapi"}
          ↳ scorecard_repo + badge_by_repo (parallel)
       -> security_check {mode: "typosquat", name: "fastapi", ecosystem: "pypi"}
          ↳ typosquat_check
       -> "fastapi supply chain risk assessment:
          Vulnerabilities: 1 low-severity (fixed in latest).
          Dependencies: 5 direct (starlette, pydantic, etc.), 23 transitive.
          OpenSSF Scorecard: 7.4/10 — good CI/CD, signed releases.
          Maintainer: single primary maintainer (tiangolo).
          Typosquatting: 'fast-api' and 'fastapi2' exist — verify
          you're installing the correct package.
          Risk: LOW. Well-maintained, active community, good security
          practices. Single-maintainer risk is mitigated by strong
          automation and community oversight."

Typosquatting Detection

You: "I'm about to install 'reqeusts' from PyPI — is this safe?"

Agent: -> security_check {mode: "typosquat", name: "reqeusts", ecosystem: "pypi"}
          ↳ typosquat_check
       -> security_check {mode: "compare_names", name_a: "reqeusts", name_b: "requests"}
          ↳ typosquat_compare
       -> "WARNING: 'reqeusts' is a likely typosquat of 'requests'.
          Edit distance: 2 (transposed 'ue' -> 'eu')
          Similarity: 87.5%
          The legitimate package is 'requests' (800M+ monthly downloads).
          'reqeusts' has very low downloads and was likely published
          to exploit typos. DO NOT install this package.
          Correct command: pip install requests"

Composite Tools (7 tools, 90 techniques)

The AI agent sees only 7 composite tools (~1K tokens), each orchestrating multiple techniques in parallel internally.

Composite Tool	Techniques	Modes	Description
`vuln_scan`	24	`package` `cve` `batch` `recent` `go_module`	Vulnerability intelligence across OSV, GHSA, NVD, EPSS, CISA KEV, Go Vuln DB
`package_info`	33	by ecosystem	Package metadata — auto-dispatches to npm (10), PyPI (4), crates.io (4), Go (3), RubyGems (4), NuGet (4), Packagist (4)
`dep_tree`	14	`dependencies` `dependents` `project` `similar` `search` `full`	Dependency graph intelligence via deps.dev + Libraries.io
`security_check`	7	`typosquat` `compare_names` `provenance` `verify_hash` `search_log`	Supply chain threat detection: typosquatting, provenance, Sigstore
`quality`	8	`scorecard` `badge` `distro` `compare` `full`	Project quality: OpenSSF Scorecard, Best Practices Badge, Repology
`license`	3	`lookup` `batch` `search`	License compliance analysis via ClearlyDefined
`meta`	1	—	List all data sources with configuration status

Individual Techniques (90)

Run npx supply-chain-mcp-server --list-all to see the full list.

Tool	Description
`osv_query`	Query OSV database for known vulnerabilities affecting a specific package and optional version
`osv_query_commit`	Query OSV database for vulnerabilities associated with a specific git commit hash
`osv_query_purl`	Query OSV database using a Package URL (purl) for known vulnerabilities
`osv_batch`	Batch query OSV database for vulnerabilities across multiple packages at once
`osv_id`	Fetch full vulnerability details from OSV by ID (OSV, CVE, GHSA, RUSTSEC, PYSEC, etc.)

Tool	Description
`ghsa_id`	Fetch a GitHub Security Advisory by its GHSA or CVE identifier
`ghsa_search`	Search GitHub Security Advisories by keyword, ecosystem, and severity
`ghsa_package`	List GitHub Security Advisories affecting a specific package in a given ecosystem
`ghsa_recent`	List the most recently updated GitHub Security Advisories

Tool	Description
`nvd_cve`	Fetch full CVE details from NVD (NIST National Vulnerability Database) by CVE ID
`nvd_search`	Search NVD for CVEs by keyword and optional CVSS v3 severity
`nvd_recent`	Fetch recently published CVEs from NVD within a given number of days

Tool	Description
`epss_score`	Get EPSS exploit probability and percentile for a single CVE ID
`epss_batch`	Batch EPSS scores for multiple CVEs (up to 100) in a single request
`epss_top`	Get the highest EPSS-scoring CVEs (most likely to be exploited)
`epss_above_threshold`	Find CVEs with EPSS score above a given threshold

Tool	Description
`kev_lookup`	Check if a CVE is in the CISA Known Exploited Vulnerabilities (KEV) catalog
`kev_search`	Search KEV entries by keyword (matched against vendor, product, name, description)
`kev_recent`	Get recently added KEV entries within the last N days
`kev_stats`	Get KEV catalog statistics: total count, top vendors, entries per year, and ransomware usage breakdown

Tool	Description
`npm_package`	Fetch npm package metadata including description, latest version, maintainers, license, repository, homepage, and publish timeline
`npm_version`	Fetch metadata for a specific npm package version including dependencies, dist info (tarball, shasum, integrity), scripts, and deprecation status
`npm_downloads`	Fetch npm download counts for a package over a given period (last-day, last-week, last-month)
`npm_search`	Search the npm registry for packages matching a query string
`npm_maintainers`	Extract maintainers and publish timeline from an npm package — critical for detecting maintainer takeover attacks
`npm_scripts`	Extract and analyze lifecycle scripts from a specific npm package version — flags suspicious commands (curl, wget, eval, exec, etc.) commonly used in supply-chain attacks
`npm_provenance`	Check whether an npm package version has Sigstore provenance attestations and signatures
`npm_audit_bulk`	Bulk query npm security advisories for a set of packages and versions
`npm_attestations`	Fetch full Sigstore attestation bundles for an npm package version — returns SLSA provenance and publish attestations
`npm_download_range`	Get day-by-day npm download counts for a date range — useful for detecting download anomalies or dependency confusion attacks

Tool	Description
`pypi_package`	Fetch PyPI package metadata including author, license, summary, project URLs, classifiers, and Python version requirements
`pypi_version`	Fetch metadata for a specific PyPI package version including release URLs with upload times, file sizes, digests, and yanked status
`pypi_releases`	List all releases of a PyPI package with upload dates, sizes, and yanked status — useful for detecting suspicious rapid version bumps
`pypi_maintainers`	Extract author and maintainer information from a PyPI package — useful for detecting ownership changes

Tool	Description
`crate_info`	Fetch crates.io crate metadata including description, download counts, max version, repository, homepage, categories, and keywords
`crate_versions`	List all versions of a crate with version number, yanked status, license, crate size, creation date, and download count
`crate_deps`	Fetch dependencies for a specific crate version including dependency kind (normal/dev/build), version requirement, and optional flag
`crate_owners`	List owners of a crate on crates.io — useful for detecting ownership changes

Tool	Description
`gem_info`	Fetch RubyGems gem metadata including name, version, authors, description, download counts, project URI, and source code URI
`gem_versions`	List all versions of a RubyGems gem with release dates, platform info, and version numbers
`gem_search`	Search the RubyGems registry for gems matching a query string
`gem_reverse_deps`	Get reverse dependencies of a RubyGems gem — useful for assessing blast radius of a compromised package

Tool	Description
`nuget_package`	Fetch NuGet package registration metadata including all versions, dependency groups, descriptions, and catalog entries
`nuget_search`	Search the NuGet registry for packages matching a query string
`nuget_versions`	List all published versions of a NuGet package from the flat container index
`nuget_catalog_entry`	Get specific version details from NuGet including dependency groups, description, license, and catalog metadata

Tool	Description
`composer_package`	Get PHP/Composer package metadata from Packagist including versions, description, maintainers, and repository information
`composer_search`	Search Packagist for PHP packages matching a query string
`composer_stats`	Get Packagist package download statistics including total, monthly, and daily download counts
`composer_advisories`	Get security advisories for PHP packages from Packagist — returns known vulnerabilities and CVEs

Tool	Description
`go_module`	Fetch Go module info from the module proxy: latest version and all available versions
`go_version`	Fetch info and go.mod contents for a specific Go module version — returns parsed dependency list
`go_sum`	Look up a Go module version in the checksum database (sum.golang.org) for hash verification

Tool	Description
`go_vuln_id`	Fetch a Go vulnerability by its ID from the Go Vulnerability Database
`go_vuln_list`	List all Go vulnerability IDs from the database index
`go_vuln_db_info`	Get Go Vulnerability Database metadata including last modified time
`go_vuln_by_module`	Find Go vulnerabilities affecting a specific module

Tool	Description
`deps_package`	Look up a package on deps.dev to get metadata, versions, and security information
`deps_version`	Get detailed info about a specific package version from deps.dev including links, licenses, and advisories
`deps_dependencies`	Get the dependency tree for a specific package version from deps.dev
`deps_dependents`	Get packages that depend on a specific package version from deps.dev
`deps_advisory`	Fetch a security advisory by key (e.g. GHSA-xxxx-xxxx-xxxx) from deps.dev
`deps_project`	Get project information from deps.dev by repository URL
`deps_query`	Look up a package by its SHA256 artifact hash on deps.dev
`deps_requirements`	Get the requirements (version constraints) for a specific package version from deps.dev
`deps_similar_packages`	Find similarly named packages on deps.dev for typosquatting detection
`deps_purl_lookup`	Look up a package by Package URL (purl) on deps.dev

Tool	Description
`scorecard_repo`	Get the OpenSSF Scorecard security score for a GitHub repository, including individual check results
`scorecard_compare`	Compare OpenSSF Scorecard security scores across 2-5 GitHub repositories side by side

Tool	Description
`badge_project`	Get OpenSSF Best Practices badge status and criteria for a project by ID
`badge_search`	Search OpenSSF Best Practices badge projects
`badge_by_repo`	Find OpenSSF Best Practices badge by GitHub repository URL

Tool	Description
`libraries_package`	Get package metadata from Libraries.io including repository info, versions, and popularity metrics
`libraries_deps`	Get dependencies for a specific package version from Libraries.io
`libraries_dependents`	Get packages that depend on a specific package from Libraries.io
`libraries_sourcerank`	Get the SourceRank quality score breakdown for a package from Libraries.io

Tool	Description
`license_lookup`	Get curated license data for a software component from ClearlyDefined
`license_batch`	Batch license lookup for multiple components via ClearlyDefined
`license_search`	Search ClearlyDefined for components by pattern

Tool	Description
`rekor_search`	Search the Rekor transparency log by email, SHA256 hash, or public key fingerprint
`rekor_entry`	Retrieve a specific Rekor transparency log entry by UUID, including body, attestation, and inclusion proof
`rekor_log_info`	Get the current Rekor transparency log status including rootHash, treeSize, and signedTreeHead
`rekor_entries_search`	Retrieve multiple Rekor log entries by their UUIDs or log indexes in a single request
`rekor_verify`	Verify whether a SHA256 artifact hash has been recorded in the Rekor transparency log

Tool	Description
`repology_project`	Get package versions across all Linux distributions from Repology
`repology_problems`	Find packaging problems/issues for a repository on Repology
`repology_search`	Search Repology projects by name

Tool	Description
`typosquat_check`	Check if a package name is suspiciously similar to popular packages (potential typosquatting) — returns matches with edit distance <= 2
`typosquat_compare`	Compare two package names directly to assess typosquatting risk, showing edit distance, similarity percentage, character-level diff, and confusable character warnings

Tool	Description
`supplychain_list_sources`	List all 21 supply chain security data sources with configuration status, API key status, and tool counts

CLI Usage

# List 7 composite tools
npx supply-chain-mcp-server --list

# List all 90 individual techniques
npx supply-chain-mcp-server --list-all

# Run composite tools
npx supply-chain-mcp-server --tool vuln_scan '{"mode":"cve","cve_id":"CVE-2024-3094"}'
npx supply-chain-mcp-server --tool vuln_scan '{"mode":"package","ecosystem":"npm","name":"express"}'
npx supply-chain-mcp-server --tool package_info '{"ecosystem":"npm","name":"express","version":"4.21.2"}'
npx supply-chain-mcp-server --tool security_check '{"mode":"typosquat","name":"reqeusts","ecosystem":"pypi"}'
npx supply-chain-mcp-server --tool quality '{"mode":"scorecard","owner":"expressjs","repo":"express"}'
npx supply-chain-mcp-server --tool dep_tree '{"mode":"dependencies","ecosystem":"npm","name":"express","version":"4.21.2"}'

# Individual techniques also work (backward compatible)
npx supply-chain-mcp-server --tool osv_query '{"ecosystem":"npm","name":"express"}'
npx supply-chain-mcp-server --tool epss_score '{"cve_id":"CVE-2024-3094"}'

Data Sources (21)

Source	Auth	Rate Limit	What it provides
OSV.dev	None	1 req/s	Cross-ecosystem vulnerability database (npm, PyPI, Go, Rust, etc.)
GitHub Advisory Database	Optional	1 req/s	Security advisories for GitHub-tracked packages
NIST NVD	Optional	5 req/30s (50 with key)	CVE details, CVSS scores, CPE matching, keyword search
FIRST EPSS	None	2 req/s	Exploit Prediction Scoring System — probability of CVE exploitation
CISA KEV	None	0.5 req/s	Known Exploited Vulnerabilities catalog with remediation deadlines
npm Registry	None	2 req/s	Package metadata, versions, scripts, provenance, attestations, advisories
PyPI	None	2 req/s	Python package metadata, versions, releases, maintainer info
crates.io	None	1 req/s	Rust crate metadata, versions, dependencies, owners
RubyGems	None	1 req/s	Ruby gem metadata, versions, reverse dependencies
NuGet	None	2 req/s	.NET package metadata, versions, dependency groups
Packagist	None	1 req/s	PHP/Composer packages, download stats, security advisories
Go Module Proxy	None	2 req/s	Go module versions, go.mod contents, checksum verification
Go Vulnerability Database	None	2 req/s	Go-specific vulnerability advisories by module
Google deps.dev	None	5 req/s	Cross-ecosystem dependency graphs, advisories, project info, purl lookup
OpenSSF Scorecard	Optional	1 req/s	Repository security scoring across 18 checks
OpenSSF Best Practices	None	1 req/s	Best Practices badge status and criteria
Libraries.io	`LIBRARIES_API_KEY`	1 req/s	Package popularity, SourceRank, cross-platform dependency data
ClearlyDefined	None	2 req/s	Curated license data across ecosystems
Sigstore Rekor	None	2 req/s	Transparency log for software signing — provenance verification
Repology	None	1 req/s	Package versions across Linux distributions
Typosquatting Detection	None	N/A	Built-in Levenshtein distance + confusable character analysis

Architecture

src/
  index.ts                # CLI entrypoint (--help, --list, --list-all, --tool, stdio server)
  composite/              # 7 composite tools (MCP-registered)
    helpers.ts            # callTool(), callToolsParallel(), buildCompositeResponse(), TOOL_REGISTRY
    vuln-scan.ts          # vuln_scan — 24 techniques (5 modes)
    package-info.ts       # package_info — 33 techniques (7 ecosystems)
    dep-tree.ts           # dep_tree — 14 techniques (6 modes)
    security-check.ts     # security_check — 7 techniques (5 modes)
    quality.ts            # quality — 8 techniques (5 modes)
    license.ts            # license — 3 techniques (3 modes)
    meta.ts               # meta — 1 technique
    index.ts              # compositeTools barrel export
  protocol/
    mcp-server.ts         # MCP server setup (stdio transport)
    tools.ts              # Tool registry — imports compositeTools
  types/
    index.ts              # Shared types (ToolDef, ToolContext, ToolResult)
  utils/
    rate-limiter.ts       # Per-provider rate limiter
    cache.ts              # TTL cache for API responses
    http.ts               # Native fetch() wrapper with error handling
    require-key.ts        # API key validation helper
  osv/                    # 5 techniques    govuln/        # 4 techniques
  ghsa/                   # 4 techniques    depsdev/       # 10 techniques
  nvd/                    # 3 techniques    scorecard/     # 2 techniques
  epss/                   # 4 techniques    badge/         # 3 techniques
  kev/                    # 4 techniques    libraries/     # 4 techniques
  npm/                    # 10 techniques   clearlydefined/# 3 techniques
  pypi/                   # 4 techniques    rekor/         # 5 techniques
  crates/                 # 4 techniques    repology/      # 3 techniques
  rubygems/               # 4 techniques    typosquat/     # 2 techniques
  nuget/                  # 4 techniques    meta/          # 1 technique
  packagist/              # 4 techniques
  go/                     # 3 techniques

Design decisions:

Composite architecture — 7 composite tools registered with MCP, each orchestrating multiple individual techniques. LLM context reduced from ~12K tokens (90 tool definitions) to ~1K tokens (7 composites).
22 providers, 1 server — Every data source is an independent module. Composite tools dispatch to the right provider techniques based on mode/ecosystem.
Per-provider rate limiters — Each data source has its own RateLimiter instance calibrated to that API's limits. No shared bottleneck.
TTL caching — Vulnerability data (5-30min), package metadata (5-15min), KEV catalog (60min), scorecard data (30min) are cached to avoid redundant API calls during multi-tool workflows.
Graceful degradation — Missing API keys don't crash the server. Tools return descriptive error messages: "Set LIBRARIES_API_KEY to enable Libraries.io tools."
2 dependencies — @modelcontextprotocol/sdk and zod. All HTTP via native fetch(). No external HTTP libraries needed.
Backward compatible — --tool CLI accepts both composite and individual technique names. --list-all shows all 90 techniques.

Limitations

Libraries.io tools require a (free) API key from libraries.io
NVD free tier is limited to 5 requests per 30 seconds (50 with API key)
GHSA and Scorecard benefit from GITHUB_TOKEN for higher rate limits
CISA KEV is fetched as a single JSON file (~2MB) and cached for 60 minutes
Typosquatting detection compares against a curated list of top npm/PyPI packages (not exhaustive)
Go checksum database (sum.golang.org) may return 404 for very old or vendored-only modules
Repology API has strict rate limits and may throttle aggressive querying
ClearlyDefined coverage varies by ecosystem — npm and Maven have best coverage
macOS / Linux tested (Windows not tested)

Part of the MCP Security Suite

Project	Domain	Tools
hackbrowser-mcp	Browser-based security testing	39 tools, Firefox, injection testing
cloud-audit-mcp	Cloud security (AWS/Azure/GCP)	38 tools, 60+ checks
github-security-mcp	GitHub security posture	39 tools, 45 checks
cve-mcp	Vulnerability intelligence	23 tools, 5 sources
osint-mcp-server	OSINT & reconnaissance	37 tools, 12 sources
darknet-mcp-server	Dark web & threat intelligence	66 tools, 16 sources
fingerprint-mcp	Digital fingerprinting	13 tools, 103 techniques
supply-chain-mcp-server	Software supply chain security	7 tools, 90 techniques, 21 sources

Available Tools

90 tools

badge_by_repoA

Find OpenSSF Best Practices badge by GitHub repository URL.

Inputs: repo_url (required).

badge_projectB

Get OpenSSF Best Practices badge status and criteria for a project by ID.

Inputs: id (required).

badge_searchC

Search OpenSSF Best Practices badge projects.

Inputs: query (required).

composer_advisoriesB

Get security advisories for PHP packages from Packagist. Returns known vulnerabilities and CVEs affecting the specified package.

Inputs: vendor (required), name (required).

composer_packageA

Get PHP/Composer package metadata from Packagist including versions, description, maintainers, and repository information.

Inputs: vendor (required), name (required).

composer_searchA

Search Packagist for PHP packages matching a query string.

Inputs: query (required), page.

composer_statsA

Get Packagist package download statistics including total, monthly, and daily download counts.

Inputs: vendor (required), name (required).

crate_depsA

Fetch dependencies for a specific crate version including dependency kind (normal/dev/build), version requirement, and optional flag.

Inputs: name (required), version (required).

crate_infoA

Fetch crates.io crate metadata including description, download counts, max version, repository, homepage, categories, and keywords.

Inputs: name (required).

crate_ownersA

List owners of a crate on crates.io including login, name, URL, and kind (user/team). Useful for detecting ownership changes.

Inputs: name (required).

crate_versionsB

List all versions of a crate with version number, yanked status, license, crate size, creation date, and download count.

Inputs: name (required).

deps_advisoryB

Fetch a security advisory by key (e.g. GHSA-xxxx-xxxx-xxxx) from deps.dev

Inputs: key (required).

deps_dependenciesB

Get the dependency tree for a specific package version from deps.dev

Inputs: ecosystem (required), name (required), version (required).

deps_dependentsA

Get packages that depend on a specific package version from deps.dev

Inputs: ecosystem (required), name (required), version (required).

deps_packageC

Look up a package on deps.dev to get metadata, versions, and security information

Inputs: ecosystem (required), name (required).

deps_projectA

Get project information from deps.dev by repository URL (e.g. github.com/expressjs/express)

Inputs: url (required).

deps_purl_lookupA

Look up a package by Package URL (purl) on deps.dev. Purl format: pkg:ecosystem/name@version

Inputs: purl (required).

deps_queryA

Look up a package by its SHA256 artifact hash on deps.dev

Inputs: hash (required).

deps_requirementsB

Get the requirements (version constraints) for a specific package version from deps.dev

Inputs: ecosystem (required), name (required), version (required).

deps_similar_packagesA

Find similarly named packages on deps.dev for typosquatting detection. Useful for verifying you're using the legitimate package.

Inputs: ecosystem (required), name (required).

deps_versionB

Get detailed info about a specific package version from deps.dev including links, licenses, and advisories

Inputs: ecosystem (required), name (required), version (required).

epss_above_thresholdA

Find CVEs with EPSS score above a given threshold.

Inputs: threshold (required), limit.

epss_batchA

Batch EPSS scores for multiple CVEs (up to 100) in a single request.

Inputs: cve_ids (required).

epss_scoreA

Get EPSS exploit probability and percentile for a single CVE ID.

Inputs: cve_id (required).

epss_topB

Get the highest EPSS-scoring CVEs (most likely to be exploited).

Inputs: limit.

gem_infoA

Fetch RubyGems gem metadata including name, version, authors, description, download counts, project URI, source code URI, and other package details.

Inputs: name (required).

gem_reverse_depsA

Get reverse dependencies of a RubyGems gem — lists all gems that depend on this gem. Useful for assessing blast radius of a compromised package.

Inputs: name (required).

gem_searchA

Search the RubyGems registry for gems matching a query string.

Inputs: query (required), page.

gem_versionsA

List all versions of a RubyGems gem with release dates, platform info, and version numbers.

Inputs: name (required).

ghsa_idB

Fetch a GitHub Security Advisory by its GHSA or CVE identifier.

Inputs: ghsa_id (required).

ghsa_packageB

List GitHub Security Advisories affecting a specific package in a given ecosystem.

Inputs: ecosystem (required), name (required).

ghsa_recentB

List the most recently updated GitHub Security Advisories.

Inputs: per_page.

ghsa_searchB

Search GitHub Security Advisories by keyword, ecosystem, and severity.

Inputs: keyword, ecosystem, severity, per_page.

go_moduleA

Fetch Go module info from the module proxy: latest version and all available versions. Module paths are automatically encoded for the proxy.

Inputs: module (required).

go_sumA

Look up a Go module version in the checksum database (sum.golang.org) for hash verification. Returns the checksum database entry.

Inputs: module (required), version (required).

go_versionA

Fetch info and go.mod contents for a specific Go module version. Returns version metadata and parsed dependency list from go.mod.

Inputs: module (required), version (required).

go_vuln_by_moduleB

Find Go vulnerabilities affecting a specific module. Fetches the modules index and filters for entries matching the given module path.

Inputs: module (required).

go_vuln_db_infoA

Get Go Vulnerability Database metadata including last modified time.

Inputs: no named parameters.

go_vuln_idA

Fetch a Go vulnerability by its ID from the Go Vulnerability Database. Returns advisory details, affected modules, versions, and references.

Inputs: id (required).

go_vuln_listB

List all Go vulnerability IDs from the database index. Returns an array of entry objects with id and modified fields.

Inputs: no named parameters.

kev_lookupC

Check if a CVE is in the CISA Known Exploited Vulnerabilities (KEV) catalog.

Inputs: cve_id (required).

kev_recentA

Get recently added KEV entries within the last N days.

Inputs: days.

kev_searchA

Search KEV entries by keyword (matched against vendor, product, name, description).

Inputs: keyword (required), limit.

kev_statsA

Get KEV catalog statistics: total count, top vendors, entries per year, and ransomware usage breakdown.

Inputs: no named parameters.

libraries_dependentsB

Get packages that depend on a specific package from Libraries.io

Inputs: platform (required), name (required).

libraries_depsB

Get dependencies for a specific package version from Libraries.io

Inputs: platform (required), name (required), version (required).

libraries_packageA

Get package metadata from Libraries.io including repository info, versions, and popularity metrics

Inputs: platform (required), name (required).

libraries_sourcerankB

Get the SourceRank quality score breakdown for a package from Libraries.io

Inputs: platform (required), name (required).

license_batchA

Batch license lookup for multiple components via ClearlyDefined.

Inputs: coordinates (required).

license_lookupB

Get curated license data for a software component from ClearlyDefined.

Inputs: type (required), name (required), version (required).

license_searchB

Search ClearlyDefined for components by pattern.

Inputs: pattern (required), type.

npm_attestationsB

Fetch full Sigstore attestation bundles for an npm package version. Returns SLSA provenance and publish attestations when available.

Inputs: name (required), version (required).

npm_audit_bulkA

Bulk query npm security advisories for a set of packages and versions. Provide an object mapping package names to version arrays, e.g. {"express":["4.17.1"]}.

Inputs: packages (required).

npm_download_rangeA

Get day-by-day npm download counts for a date range. Useful for detecting download anomalies or sudden spikes that may indicate dependency confusion attacks.

Inputs: name (required), start (required), end (required).

npm_downloadsA

Fetch npm download counts for a package over a given period (last-day, last-week, last-month).

Inputs: name (required), period.

npm_maintainersA

Extract maintainers and publish timeline from an npm package. Critical for detecting maintainer takeover attacks like the event-stream incident.

Inputs: name (required).

npm_packageA

Fetch npm package metadata including description, latest version, maintainers, license, repository, homepage, and publish timeline.

Inputs: name (required).

npm_provenanceA

Check whether an npm package version has Sigstore provenance attestations and signatures. Key for detecting unauthorized publishes like the Axios-style attacks.

Inputs: name (required), version (required).

npm_scriptsA

Extract and analyze lifecycle scripts from a specific npm package version. Flags suspicious commands (curl, wget, eval, exec, etc.) commonly used in supply-chain attacks.

Inputs: name (required), version (required).

npm_searchB

Search the npm registry for packages matching a query string.

Inputs: query (required), limit.

npm_versionB

Fetch metadata for a specific npm package version including dependencies, dist info (tarball, shasum, integrity), scripts, and deprecation status.

Inputs: name (required), version (required).

nuget_catalog_entryA

Get specific version details from NuGet including dependency groups, description, license, and catalog metadata.

Inputs: name (required), version (required).

nuget_packageB

Fetch NuGet package registration metadata including all versions, dependency groups, descriptions, and catalog entries.

Inputs: name (required).

nuget_searchB

Search the NuGet registry for packages matching a query string.

Inputs: query (required), limit.

nuget_versionsB

List all published versions of a NuGet package from the flat container index.

Inputs: name (required).

nvd_cveA

Fetch full CVE details from NVD (NIST National Vulnerability Database) by CVE ID.

Inputs: cve_id (required).

nvd_recentA

Fetch recently published CVEs from NVD within a given number of days.

Inputs: days, results_per_page.

nvd_searchB

Search NVD for CVEs by keyword and optional CVSS v3 severity.

Inputs: keyword (required), severity, results_per_page.

osv_batchB

Batch query OSV database for vulnerabilities across multiple packages at once.

Inputs: queries (required).

osv_idA

Fetch full vulnerability details from OSV by ID (OSV, CVE, GHSA, RUSTSEC, PYSEC, etc.).

Inputs: id (required).

osv_queryB

Query OSV database for known vulnerabilities affecting a specific package and optional version.

Inputs: ecosystem (required), name (required), version.

osv_query_commitB

Query OSV database for vulnerabilities associated with a specific git commit hash.

Inputs: commit (required).

osv_query_purlB

Query OSV database using a Package URL (purl) for known vulnerabilities.

Inputs: purl (required).

pypi_maintainersB

Extract author and maintainer information from a PyPI package. Useful for detecting ownership changes or suspicious maintainer patterns.

Inputs: name (required).

pypi_packageB

Fetch PyPI package metadata including author, license, summary, project URLs, classifiers, and Python version requirements.

Inputs: name (required).

pypi_releasesA

List all releases of a PyPI package with upload dates, sizes, and yanked status. Useful for detecting suspicious rapid version bumps or yanked releases.

Inputs: name (required).

pypi_versionA

Fetch metadata for a specific PyPI package version including release URLs with upload times, file sizes, digests, and yanked status.

Inputs: name (required), version (required).

rekor_entries_searchB

Retrieve multiple Rekor log entries by their UUIDs or log indexes in a single request

Inputs: entry_uuids, log_indexes.

rekor_entryA

Retrieve a specific Rekor transparency log entry by UUID, including body, attestation, and inclusion proof

Inputs: uuid (required).

rekor_log_infoA

Get the current Rekor transparency log status including rootHash, treeSize, signedTreeHead, and treeID

Inputs: no named parameters.

rekor_searchA

Search the Rekor transparency log by email, SHA256 hash, or public key fingerprint and return matching entry UUIDs

Inputs: query (required).

rekor_verifyA

Verify whether a SHA256 artifact hash has been recorded in the Rekor transparency log, returning entry details if found

Inputs: hash (required).

repology_problemsB

Find packaging problems/issues for a repository on Repology.

Inputs: repo (required).

repology_projectA

Get package versions across all Linux distributions from Repology.

Inputs: name (required).

repology_searchC

Search Repology projects by name.

Inputs: query (required).

scorecard_compareB

Compare OpenSSF Scorecard security scores across 2-5 GitHub repositories side by side

Inputs: repos (required).

scorecard_repoA

Get the OpenSSF Scorecard security score for a GitHub repository, including individual check results

Inputs: owner (required), repo (required).

supplychain_list_sourcesA

List all 21 supply chain security data sources with their configuration status, required environment variables, available tools, and API base URLs.

Inputs: no named parameters.

typosquat_checkA

Check if a package name is suspiciously similar to popular packages (potential typosquatting). Returns matches with edit distance <= 2.

Inputs: name (required), ecosystem.

typosquat_compareA

Compare two package names directly to assess typosquatting risk, showing edit distance, similarity percentage, character-level diff, and confusable character warnings

Inputs: name_a (required), name_b (required).

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

Deploy Server

Claude Code, inside the Godot 4 editorFlockbay puts an AI agent in the real Godot 4 editor: it writes GDScript, runs your game and fixes what breaks. Free, or bring your own Claude Code or Codex.flockbay.comAd

TDQS

B3/5.0

Scored 2026-09-09 18:21 across 90 tools

Disambiguation4/5

Most tools are clearly separated by ecosystem prefix and specific purpose, so an agent can usually tell them apart. There are a few boundary overlaps, such as npm_package vs npm_maintainers and npm_provenance vs npm_attestations, which could cause occasional misselection.

Naming Consistency4/5

Tool names follow a consistent ecosystem_prefix + noun pattern, with mostly snake_case throughout. Minor inconsistencies exist in verb choice (search/lookup/query/fetch) and a few odd names like epss_above_threshold and rekor_entries_search, but overall the pattern is predictable.

Tool Count1/5

With 90 tools, this server is far beyond the recommended scope for effective agent coherence. Even though the domain is broad, this many tools creates significant navigation and selection overhead for an agent.

Completeness4/5

The server covers an impressively wide range of supply-chain security data: package registries, vulnerability databases, dependency graphs, provenance, licenses, scorecards, and transparency logs. Some gaps exist, such as no direct Maven/Java support and no dedicated PyPI or crates.io search, but the core supply-chain investigation workflows are well covered.

Maintenance

ActivityNo data

ResponsivenessSyncing

Resources

Related MCP Connectors

agent-bom
io.github.koda-ai-studio
AI supply-chain BOM: agents, MCP servers, packages and recorded reach. Scan and investigate via MCP.
Security Developer Tools Code Analysis
137
https://agent-bom-mcp.up.railway.app/mcp
DepScopeA
dev.depscope
Package intelligence MCP for AI agents — 22 tools, 19 ecosystems, AGPL SDK, free.
Security Developer Tools
2
https://mcp.depscope.dev/mcp
protectwith-kbA
io.github.burademirung
AI-security knowledge as MCP: standards-mapped tools (OWASP, NIST, MITRE) for AI agents.
Security AI & Machine Learning
2
https://protectwith-kb.burademirung.workers.dev/mcp
pkgxrayA
io.github.adamsjack711-ux
Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.
Penetration Testing Security Developer Tools
2111
https://mcp.pkgxray.ca/mcp

Related MCP Servers

DevSecOps MCP Server
Testing & QA Tools Security Developer Tools
JesusDavidQuarksoft
A
license
B
quality
D
maintenance
An MCP server that integrates SAST, DAST, and SCA security tools to enable AI-driven vulnerability scanning and automated security reporting. It allows AI assistants to execute and analyze results from tools like Semgrep, OWASP ZAP, and Trivy within a DevSecOps workflow.
Updated 9 months ago (2026-02-04 02:27 UTC)
6
MIT
DepScope
Autonomous Agents Developer Tools Security
cuttalo
F
license
A
quality
D
maintenance
Package intelligence MCP server. Stops AI agents from installing hallucinated/malicious packages across 17 ecosystems. 22 tools, free, no auth.
Updated 6 months ago (2026-05-05 22:40 UTC)
22
1
-
depguard
Code Analysis Developer Tools Security
mopanc
A
license
A
quality
B
maintenance
MCP security server for AI coding agents. 12 tools: pre-install guardian, vulnerability audit, supply-chain attack detection via static code analysis, and CycloneDX 1.6 SBOM generation. Zero runtime dependencies.
Updated 3 days ago (2026-11-09 13:55 UTC)
15
65 npm
15
Apache 2.0
cve-mcp
Security Research & Data
badchars
A
license
A
quality
C
maintenance
Unifies NVD, EPSS, CISA KEV, GitHub Advisory, and OSV into a single MCP server, enabling AI agents to query vulnerability intelligence conversationally with 23 tools for incident response, prioritization, dependency audits, and threat monitoring.
Updated 2 months ago (2026-09-17 01:24 UTC)
41
292 npm
30
MIT

The Problem

How It's Different

Quick Start

Option 1: npx (no install)

Option 2: Clone

Environment variables (optional)

Connect to your AI agent

Start querying

What The AI Can Do

Full Package Audit

Vulnerability Triage

Dependency Risk Assessment

Typosquatting Detection

Composite Tools (7 tools, 90 techniques)

Individual Techniques (90)

CLI Usage

Data Sources (21)

Architecture

Limitations

Part of the MCP Security Suite

Available Tools

Tool Schema Changelog

TDQS

Maintenance

Resources

Related MCP Connectors

Related MCP Servers

DevSecOps MCP Server

DepScope

depguard

cve-mcp