Skip to main content
Glama
verdaccio

@verdaccio/mcp-server

Official
by verdaccio

@verdaccio/mcp-server

⚠️ Experimental: This project is a work in progress and subject to change. APIs, tool names, and behaviour may change without notice between versions.

An MCP (Model Context Protocol) server that connects any MCP-compatible AI client to a Verdaccio private npm registry.

MCP is an open protocol — this server works with any MCP client, not just Claude.

API endpoint paths are sourced directly from @verdaccio/middleware constants (e.g. SEARCH_API_ENDPOINTS, PACKAGE_API_ENDPOINTS) so they stay in sync with Verdaccio's own routing definitions.

Compatible clients

Client

Config location

Claude Desktop / Claude Code

~/.claude.json or workspace .mcp.json

Cursor

.cursor/mcp.json

Windsurf

~/.codeium/windsurf/mcp_config.json

VS Code + Copilot

.vscode/mcp.json

Continue.dev

~/.continue/config.json

Any custom app

MCP SDK

Related MCP server: @lpm-registry/mcp-server

Installation

npm install -g @verdaccio/mcp-server

# or run without installing
npx @verdaccio/mcp-server

Using with Claude

Claude Code (CLI)

The quickest way is via the claude mcp add command:

# Local scope (current project only)
claude mcp add verdaccio -e VERDACCIO_URL=http://your-verdaccio:4873 -- npx @verdaccio/mcp-server

# User scope (all projects)
claude mcp add -s user verdaccio -e VERDACCIO_URL=http://your-verdaccio:4873 -- npx @verdaccio/mcp-server

# With auth token
claude mcp add verdaccio \
  -e VERDACCIO_URL=http://your-verdaccio:4873 \
  -e VERDACCIO_TOKEN=your-token \
  -- npx @verdaccio/mcp-server

Claude Desktop

Add to ~/.claude.json:

{
  "mcpServers": {
    "verdaccio": {
      "command": "npx",
      "args": ["@verdaccio/mcp-server"],
      "env": {
        "VERDACCIO_URL": "http://your-verdaccio:4873",
        "VERDACCIO_TOKEN": "your-token"
      }
    }
  }
}

Restart Claude after adding the config. You can verify the server is connected by asking:

"What tools do you have available for Verdaccio?"

Tools

start_registry

Start the Verdaccio registry and return its URL. When no VERDACCIO_URL is configured, an embedded registry is started automatically on a random local port with temporary storage.

No parameters required.

Example prompt: "Start a local Verdaccio registry so I can publish packages"


find_package

Search for packages in the registry by name or keyword.

Parameter

Type

Required

Description

query

string

yes

Package name or search term

size

number

no

Max results to return (1–100, default 20)

Uses endpoint: SEARCH_API_ENDPOINTS.search → /-/v1/search

Example prompt: "Find all packages related to authentication in our private registry"


get_package

Get detailed metadata for a specific package — description, author, license, dist-tags, and version history.

Parameter

Type

Required

Description

package

string

yes

Package name, e.g. my-lib or @scope/my-lib

version

string

no

Specific version e.g. 1.2.3 (omit for latest)

Uses endpoint: PACKAGE_API_ENDPOINTS.get_package_by_version → /:package{/:version}

Example prompt: "What versions of @myorg/ui-components are available?"


publish_package

Publish a package to the registry by name and version. Checks whether the package already exists and prevents re-publishing an existing version. Uses generatePackageMetadata from @verdaccio/test-helper to generate the full publish payload automatically — no tarball needed.

Parameter

Type

Required

Description

name

string

yes

Package name, e.g. my-lib or @scope/my-lib

version

string

yes

Version to publish, e.g. 1.0.0

tag

string

no

Dist-tag to apply (default: latest)

Uses endpoint: PUBLISH_API_ENDPOINTS.add_package → /:package

Example prompt: "Publish @myorg/ui-components version 2.1.0 to our private registry"


unpublish_package

Unpublish a specific version of a package from the registry. Fetches the current metadata, removes the target version, drops dist-tags that pointed at it (moving latest to the highest remaining stable version), and deletes the tarball. Unpublishing the last version removes the whole package. This is a 3-step operation (GET → PUT → DELETE) — if the final step fails, metadata may already be updated.

Parameter

Type

Required

Description

name

string

yes

Package name, e.g. my-lib or @scope/my-lib

version

string

yes

Version to unpublish, e.g. 1.0.3

Example prompt: "Unpublish version 1.0.3 of @myorg/ui-components from the registry"


add_user

Register a new user in the Verdaccio registry. Returns a Bearer token on success.

Parameter

Type

Required

Description

username

string

yes

Desired username

password

string

yes

Desired password

Uses endpoint: USER_API_ENDPOINTS.add_user → /-/user/:org_couchdb_user

Example prompt: "Register a new user called jdoe in Verdaccio"


login

Authenticate with username and password using Basic auth, so Verdaccio's authenticate branch issues a token. As with npm login, if the user does not exist and registration is open, Verdaccio creates it; the tool reports when that happens.

Parameter

Type

Required

Description

username

string

yes

Verdaccio username

password

string

yes

Verdaccio password

Uses endpoint: USER_API_ENDPOINTS.add_user → /-/user/:org_couchdb_user


get_profile

Get the profile of the currently authenticated user (requires VERDACCIO_TOKEN).

Uses endpoint: PROFILE_API_ENDPOINTS.get_profile → /-/npm/v1/user


list_tokens

List all API tokens for the authenticated user.

Uses endpoint: TOKEN_API_ENDPOINTS.get_tokens → /-/npm/v1/tokens


create_token

Create a new API token for the authenticated user.

Parameter

Type

Required

Description

password

string

yes

Current user password

readonly

boolean

no

Make token read-only (default false)

cidr

string[]

no

IP ranges to whitelist, e.g. ["10.0.0.0/8"]

Uses endpoint: TOKEN_API_ENDPOINTS.get_tokens → /-/npm/v1/tokens (POST)


delete_token

Delete an API token by its key.

Parameter

Type

Required

Description

tokenKey

string

yes

Token key identifier (from list_tokens)

Uses endpoint: TOKEN_API_ENDPOINTS.delete_token → /-/npm/v1/tokens/token/:tokenKey

Example

example

Setup

1. Install and build

pnpm install
pnpm build

2. Configure environment

Variable

Default

Description

VERDACCIO_URL

http://localhost:4873

Base URL of your Verdaccio instance

VERDACCIO_TOKEN

—

Bearer token for authenticated registries

3. Add to your MCP client

The server config format is the same across all clients — only the config file location differs (see Compatible clients above).

{
  "mcpServers": {
    "verdaccio": {
      "command": "npx",
      "args": ["@verdaccio/mcp-server"],
      "env": {
        "VERDACCIO_URL": "http://your-verdaccio:4873",
        "VERDACCIO_TOKEN": "your-token"
      }
    }
  }
}

Development

Testing locally without publishing

To connect your MCP client to the local source without publishing to npm, point it directly at the local file.

Option A — compiled (requires pnpm build after each change):

{
  "mcpServers": {
    "verdaccio": {
      "command": "node",
      "args": ["/path/to/mcp-server-verdaccio/dist/index.js"],
      "env": {
        "VERDACCIO_URL": "http://localhost:4873"
      }
    }
  }
}

Option B — TypeScript directly via tsx (no build step, recommended for dev):

{
  "mcpServers": {
    "verdaccio": {
      "command": "npx",
      "args": ["tsx", "/path/to/mcp-server-verdaccio/src/index.ts"],
      "env": {
        "VERDACCIO_URL": "http://localhost:4873"
      }
    }
  }
}

With option B, just save your changes and restart the MCP client — no build step needed.

Running standalone

# Run directly with tsx (no build step)
VERDACCIO_URL=http://localhost:4873 pnpm dev

# Build and run compiled output
pnpm build
pnpm start

# Run tests
pnpm test
pnpm test:watch

Releasing

Add a changeset with pnpm changeset in any PR that should be released. Merging to main opens a "chore: release" PR; merging that PR publishes to npm.

Stack

Available Tools

11 tools
add_userB

Register a new user in the Verdaccio registry. Returns a Bearer token on success.

ParametersJSON Schema
NameRequiredDescriptionDefault
passwordYesDesired password
usernameYesDesired username

TDQS

B3.3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full behavioral burden. It does disclose a meaningful side effect/return — a Bearer token issued on success — but says nothing about failure modes (username already taken), permission requirements, or whether the new user is authenticated afterward.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two short sentences with zero waste; the core action is front-loaded and the return value follows immediately.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema, so the description must cover return values, and it partially does by mentioning the Bearer token. However, with no annotations and a mutation-style tool, the absence of error behavior and auth/permission context leaves visible gaps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% (username and password both documented), so the schema already carries the parameter semantics. The description adds no additional meaning such as password constraints or username format rules, making the baseline 3 appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: 'Register a new user in the Verdaccio registry.' This is clearly distinct from an authenticate-style tool like the sibling 'login', but the description never names that sibling or states the boundary explicitly.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this versus 'login' (the obvious alternative), nor any prerequisite such as whether registration is open or requires existing credentials. The agent must infer the entire usage context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

create_tokenC

Create a new API token for the currently authenticated user in Verdaccio

ParametersJSON Schema
NameRequiredDescriptionDefault
cidrNoCIDR ranges to whitelist for this token, e.g. ["192.168.1.0/24"]
passwordYesCurrent user password (required by Verdaccio to create tokens)
readonlyNoWhether the token should be read-only (default false)

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full behavioral burden. It implies an authenticated-session requirement via "currently authenticated user," but says nothing about whether the token secret is shown only once, whether creation is reversible, or any permission/rate constraints on a credential-minting operation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single front-loaded sentence with no filler or repetition. It is efficient, though its brevity reflects thin content rather than disciplined density.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a security-sensitive creation tool with no annotations and no output schema, the description should at least note the required password and the one-time disclosure of the generated secret. Those gaps leave an agent without the context needed to call or handle the result correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, and the schema already explains cidr, password, and readonly with examples and defaults. The description adds no additional parameter meaning, so the baseline of 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description gives a specific verb+resource ("Create a new API token") scoped to "the currently authenticated user in Verdaccio," which clearly separates it from list_tokens and delete_token by name. It stops short of explicit sibling differentiation in prose, so a 4 rather than a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to choose this over list_tokens/delete_token, no prerequisites (e.g. that a valid password is mandatory), and no mention of what happens if a token already exists. The agent gets no routing or precondition information beyond the tool name.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

delete_tokenC

Delete an API token by its key from Verdaccio

ParametersJSON Schema
NameRequiredDescriptionDefault
tokenKeyYesThe token key to delete (not the token value, but the key identifier)

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full behavioral burden, yet it omits that deletion is irreversible, what permissions are required, and what happens on an unknown key. It confirms the operation is a mutation but discloses nothing about its consequences.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single front-loaded sentence with no filler; the verb and scope come first. It is efficient, though it is short enough that the missing behavioral caveats are absent rather than trimmed.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a destructive, one-parameter tool with no annotations and no output schema, the description should at minimum warn about irreversibility and required auth. None of that is present, leaving key operational questions unanswered.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and the schema already clarifies that tokenKey is the key identifier rather than the token value. The description's 'by its key' restates that distinction without adding format or constraint details, so baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Delete an API token') and adds scoping detail ('by its key from Verdaccio'), which separates it from create_token and list_tokens. It stops short of explicitly naming those siblings, so it is clear but not fully differentiated.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit when-to-use or when-not-to-use guidance, and no mention of alternatives like list_tokens for finding the key first. Usage is only implied by the verb itself.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

find_packageB

Search for a private package in the Verdaccio registry by name or keyword

ParametersJSON Schema
NameRequiredDescriptionDefault
sizeNoMax number of results to return (default 20)
queryYesPackage name or search term

TDQS

B3.3/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full disclosure burden. It signals a read-style lookup, but says nothing about authentication against a private registry, rate limits, result ordering, or whether only visible/authorized packages are searched — all meaningful gaps for a registry search.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single front-loaded sentence with no filler. It identifies the action, the resource, and the match modes in one pass, which is the right size for a simple two-parameter tool.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a low-complexity read tool with no nested params, the definition is minimally adequate. With no output schema and no annotations, it should at least hint at what a result contains or that results are paginated/limited, which it does not.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so both query and size are documented structurally; baseline 3 applies. The phrase 'by name or keyword' adds a little meaning to query (it accepts either an exact name or free-text term), but size/default behavior is left entirely to the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (search) and a clearly scoped resource (private packages in the Verdaccio registry) plus the matching modes (name or keyword). It implicitly contrasts with retrieval-style siblings like get_package, but never names an alternative, so full sibling differentiation is missing.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is only implied: an agent can infer this is the discovery tool for when the exact package name isn't known, contrasting with get_package. There is no explicit when-to-use statement, no prerequisites, and no named alternative to route to.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_packageB

Get detailed metadata for a specific package (and optionally a specific version) from Verdaccio

ParametersJSON Schema
NameRequiredDescriptionDefault
packageYesPackage name, e.g. my-lib or @scope/my-lib
versionNoSpecific version, e.g. 1.2.3 (omit for latest)

TDQS

B3.3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full behavioral burden. 'Get' plus 'metadata' implies a safe read and the parenthetical discloses the version-optional, latest-by-default behavior, but nothing is said about whether a registry/auth context is required, what happens when the package or version does not exist, or how large the metadata payload is.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single sentence with the verb, resource, optional scope, and source system front-loaded. There is no filler and nothing redundant.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a two-parameter read tool with no annotations and no output schema, the description is minimally adequate: it establishes what is fetched but not what metadata fields come back or any failure behavior. An agent could call it correctly, but not predict the response.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and both parameters already carry examples and the 'omit for latest' note, so the schema does the heavy lifting. The description only restates that version is optional and adds no syntax or format detail beyond it.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Get detailed metadata for a specific package') and clarifies the optional version scope, so the operation is unambiguous. It does not differentiate from the sibling find_package, which leaves the agent to guess which one to reach for when the exact package name is uncertain.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives no when-to-use guidance, no prerequisites, and no exclusions. With find_package sitting in the sibling list, the boundary between lookup-by-name and search is never drawn, so the agent must infer the intended context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_profileA

Get the profile of the currently authenticated user in Verdaccio

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A3.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the burden, and 'currently authenticated user' does imply this is a read of the caller's own identity and that authentication is required. However, it says nothing about what is returned, whether the call can fail for anonymous users, or any other behavioral trait.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single short sentence with the verb and scope front-loaded and zero filler. Every word earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a zero-parameter identity lookup this is minimally adequate, but with no output schema the description could reasonably indicate what profile fields are returned so the agent knows what to expect. It leaves the caller to discover the response shape empirically.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters, so the baseline of 4 applies; there are no arguments whose semantics could be clarified. Nothing in the description is needed to compensate for schema gaps.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Get the profile') and scopes it to 'the currently authenticated user in Verdaccio', which separates it from package-oriented siblings like get_package and token-oriented siblings like list_tokens. It is clear what the tool does, though the sibling differentiation is implicit rather than explicit.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is implied by 'currently authenticated user' (call it when you need the logged-in identity), but the description never states when to use this versus alternatives like list_tokens or add_user, nor any prerequisite such as being logged in first. No explicit exclusions or context are offered.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_tokensA

List all API tokens for the currently authenticated user in Verdaccio

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It discloses the auth scoping ('currently authenticated user'), which tells the agent a session is required, but says nothing about pagination, ordering, or whether token secrets are included in the output.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single front-loaded sentence with no filler. The scope qualifier is placed at the end where it reads naturally, and no sentence is wasted.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple parameterless list tool with no output schema, the description says what is listed and whose tokens they are, which is enough to invoke it correctly. Minor gaps around return contents and pagination remain.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters, so there are no parameter semantics to document - the baseline for a parameterless tool applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (List) and resource (API tokens) with a clear scope ('currently authenticated user in Verdaccio'). The verb alone distinguishes it from create_token and delete_token siblings, though it does not explicitly name them.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is implied by the description - view your own tokens - but there is no explicit when-to-use or when-not guidance, and no reference to alternatives like get_profile. For a zero-param read tool this is minimal but acceptable.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

loginB

Authenticate with the Verdaccio registry using username and password. Returns a Bearer token.

ParametersJSON Schema
NameRequiredDescriptionDefault
passwordYesVerdaccio password
usernameYesVerdaccio username

TDQS

B3.3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full behavioral burden. It usefully discloses the return value (a Bearer token), which matters since there is no output schema. However, it is silent on invalid-credential behavior, token lifetime, and any auth or rate-limit constraints.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two tight sentences with zero waste, front-loading the action and following with the return value. Nothing is redundant or padded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple two-parameter auth tool, the description covers the essentials and compensates for the missing output schema by naming the returned token. It falls short on error behavior and token lifecycle, which an agent calling it may need to know.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so both parameters (username, password) are already fully documented in the schema. The description merely restates that username and password are used, adding no new semantics; baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (authenticate) and resource (Verdaccio registry) plus the credentials used, so the operation is immediately clear. It does not, however, distinguish itself from the sibling create_token, which may also yield a token — a differentiation an agent would benefit from.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description says nothing about when to call login versus alternatives such as create_token, add_user, or list_tokens. Usage is only weakly implied by the action itself; no prerequisites or exclusions are given.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

publish_packageC

Publish a package to the Verdaccio registry by name and version. Generates the required package metadata automatically.

ParametersJSON Schema
NameRequiredDescriptionDefault
tagNoDist-tag to apply (default: latest)
nameYesPackage name, e.g. my-lib or @scope/my-lib
versionYesVersion to publish, e.g. 1.0.0

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full behavioral burden. It adds one useful detail ('generates the required package metadata automatically'), but omits auth requirements, what happens when a version already exists, and any failure/overwrite semantics for what is clearly a mutating operation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two short sentences, front-loaded with the action and resource, with no filler. The second sentence carries real information about automatic metadata generation rather than padding.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a mutation tool with no annotations and no output schema, the description should cover authentication needs and conflict behavior. It is silent on both, leaving an agent unable to predict failure modes even though the parameter surface itself is fully covered by the schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents name, version, and the tag default of 'latest'. The description reinforces that name and version are the key inputs but adds no format or constraint detail beyond the schema, making the baseline 3 appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource ('Publish a package to the Verdaccio registry by name and version'), so an agent immediately knows what the tool does. It does not name or distinguish itself from the obvious sibling unpublish_package, but the verb alone makes the distinction unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no when-to-use or when-not-to-use guidance and no mention of prerequisites, even though siblings include login, add_user, and create_token, strongly implying authentication is required before publishing. The agent gets no routing or precondition information.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

start_registryA

Start the Verdaccio registry (if not already running) and return its URL. When no VERDACCIO_URL is configured, an embedded registry is started automatically on a random local port.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and does well: it discloses idempotency ('if not already running'), the return value, and the conditional embedded-registry behavior keyed on VERDACCIO_URL. It omits auth requirements, blocking behavior, and whether the random port is stable across calls.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two tight sentences with the action and return value front-loaded, followed by the conditional fallback. No filler or redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a zero-param, no-annotation tool with no output schema, the description covers the action, idempotency, and return value. It could say more about the port's persistence and auth expectations, but the core operational picture is complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters, so the schema itself imposes no documentation burden; baseline is 4. The description adds no parameter detail, but none is needed for a parameterless lifecycle call.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (Start) and resource (the Verdaccio registry), plus the return value (its URL). It is unambiguous and clearly distinct from the package/token/auth siblings, which operate on registry contents rather than the registry process itself.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explains the operating context clearly: start only if not already running, and the fallback behavior when VERDACCIO_URL is absent. There is no explicit when-to-use-vs-alternative phrasing, but no real alternative exists for this lifecycle action, so context is adequate.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

unpublish_packageB

Unpublish a specific version of a package from the Verdaccio registry. Removes the version from metadata and deletes its tarball.

ParametersJSON Schema
NameRequiredDescriptionDefault
nameYesPackage name, e.g. my-lib or @scope/my-lib
versionYesVersion to unpublish, e.g. 1.0.3

TDQS

B3.3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full behavioral burden. It does disclose the concrete effects ('Removes the version from metadata and deletes its tarball'), which is genuinely useful destructive-effect context, but it omits auth/permission requirements, irreversibility, and any guard conditions (e.g. cannot unpublish the last remaining version).

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two short sentences, zero filler, with the resource and the destructive consequence front-loaded. Every clause earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a destructive mutation tool with no annotations and no output schema, the description covers the core effect but leaves out auth requirements, failure modes, and irreversibility. It is adequate but not complete for a delete-style operation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so both parameters ('name' and 'version') are already fully documented with examples in the schema. The description only echoes 'specific version' and adds no syntax or format detail beyond the schema, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('Unpublish') and resource ('a specific version of a package from the Verdaccio registry') with clear scope limited to a single version rather than the whole package. The verb inherently contrasts with the sibling publish_package, though no sibling is named explicitly.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description says what the tool does but never states when to use it, when not to, or what prerequisites/alternatives exist. Usage is only implied by the tool name, so the agent gets no routing guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 11 tool updatesv0.1.0
    • First observedadd_user
    • First observedcreate_token
    • First observeddelete_token
    • First observedfind_package
    • First observedget_package
    • First observedget_profile
    • First observedlist_tokens
    • First observedlogin
    • First observedpublish_package
    • First observedstart_registry
    • First observedunpublish_package

TDQS

A3.6/5.0

Scored across 11 tools

Disambiguation5/5

Each tool targets a clearly distinct resource+action: package lifecycle (publish/unpublish/get/find), registry lifecycle (start_registry), user auth (add_user/login/get_profile), and token management (list/create/delete). The only near-neighbors, add_user vs login and find_package vs get_package, are differentiated by register-vs-authenticate and search-vs-detail respectively.

Naming Consistency4/5

Nearly all tools follow a clean snake_case verb_noun pattern (publish_package, create_token, get_profile). The single-verb 'login' is a minor deviation from the verb_noun convention but is still readable and unambiguous.

Tool Count5/5

11 tools sit comfortably in the well-scoped 3-15 range and each maps to a needed registry operation. No redundant or filler tools are present.

Completeness4/5

Covers the main registry workflows: publish/unpublish, discovery, authentication, and full token CRUD. Minor gaps exist (no whole-package removal or metadata update beyond publish, no logout), but these are workable rather than blocking.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers