@verdaccio/mcp-server
OfficialProvides tools for interacting with a Verdaccio private npm registry, including searching, publishing packages, managing tokens, and authenticating users.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@@verdaccio/mcp-serverSearch for packages about authentication in our registry"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
@verdaccio/mcp-server
⚠️ Experimental: This project is a work in progress and subject to change. APIs, tool names, and behaviour may change without notice between versions.
An MCP (Model Context Protocol) server that connects any MCP-compatible AI client to a Verdaccio private npm registry.
MCP is an open protocol — this server works with any MCP client, not just Claude.
API endpoint paths are sourced directly from @verdaccio/middleware constants (e.g. SEARCH_API_ENDPOINTS, PACKAGE_API_ENDPOINTS) so they stay in sync with Verdaccio's own routing definitions.
Compatible clients
Client | Config location |
| |
| |
| |
| |
| |
Any custom app |
Related MCP server: @lpm-registry/mcp-server
Installation
npm install -g @verdaccio/mcp-server
# or run without installing
npx @verdaccio/mcp-serverUsing with Claude
Claude Code (CLI)
The quickest way is via the claude mcp add command:
# Local scope (current project only)
claude mcp add verdaccio -e VERDACCIO_URL=http://your-verdaccio:4873 -- npx @verdaccio/mcp-server
# User scope (all projects)
claude mcp add -s user verdaccio -e VERDACCIO_URL=http://your-verdaccio:4873 -- npx @verdaccio/mcp-server
# With auth token
claude mcp add verdaccio \
-e VERDACCIO_URL=http://your-verdaccio:4873 \
-e VERDACCIO_TOKEN=your-token \
-- npx @verdaccio/mcp-serverClaude Desktop
Add to ~/.claude.json:
{
"mcpServers": {
"verdaccio": {
"command": "npx",
"args": ["@verdaccio/mcp-server"],
"env": {
"VERDACCIO_URL": "http://your-verdaccio:4873",
"VERDACCIO_TOKEN": "your-token"
}
}
}
}Restart Claude after adding the config. You can verify the server is connected by asking:
"What tools do you have available for Verdaccio?"
Tools
start_registry
Start the Verdaccio registry and return its URL. When no VERDACCIO_URL is configured, an embedded registry is started automatically on a random local port with temporary storage.
No parameters required.
Example prompt: "Start a local Verdaccio registry so I can publish packages"
find_package
Search for packages in the registry by name or keyword.
Parameter | Type | Required | Description |
| string | yes | Package name or search term |
| number | no | Max results to return (1–100, default 20) |
Uses endpoint: SEARCH_API_ENDPOINTS.search → /-/v1/search
Example prompt: "Find all packages related to authentication in our private registry"
get_package
Get detailed metadata for a specific package — description, author, license, dist-tags, and version history.
Parameter | Type | Required | Description |
| string | yes | Package name, e.g. |
| string | no | Specific version e.g. |
Uses endpoint: PACKAGE_API_ENDPOINTS.get_package_by_version → /:package{/:version}
Example prompt: "What versions of @myorg/ui-components are available?"
publish_package
Publish a package to the registry by name and version. Checks whether the package already exists and prevents re-publishing an existing version. Uses generatePackageMetadata from @verdaccio/test-helper to generate the full publish payload automatically — no tarball needed.
Parameter | Type | Required | Description |
| string | yes | Package name, e.g. |
| string | yes | Version to publish, e.g. |
| string | no | Dist-tag to apply (default: |
Uses endpoint: PUBLISH_API_ENDPOINTS.add_package → /:package
Example prompt: "Publish @myorg/ui-components version 2.1.0 to our private registry"
unpublish_package
Unpublish a specific version of a package from the registry. Fetches the current metadata, removes the target version, drops dist-tags that pointed at it (moving latest to the highest remaining stable version), and deletes the tarball. Unpublishing the last version removes the whole package. This is a 3-step operation (GET → PUT → DELETE) — if the final step fails, metadata may already be updated.
Parameter | Type | Required | Description |
| string | yes | Package name, e.g. |
| string | yes | Version to unpublish, e.g. |
Example prompt: "Unpublish version 1.0.3 of @myorg/ui-components from the registry"
add_user
Register a new user in the Verdaccio registry. Returns a Bearer token on success.
Parameter | Type | Required | Description |
| string | yes | Desired username |
| string | yes | Desired password |
Uses endpoint: USER_API_ENDPOINTS.add_user → /-/user/:org_couchdb_user
Example prompt: "Register a new user called jdoe in Verdaccio"
login
Authenticate with username and password using Basic auth, so Verdaccio's authenticate branch issues a token. As with npm login, if the user does not exist and registration is open, Verdaccio creates it; the tool reports when that happens.
Parameter | Type | Required | Description |
| string | yes | Verdaccio username |
| string | yes | Verdaccio password |
Uses endpoint: USER_API_ENDPOINTS.add_user → /-/user/:org_couchdb_user
get_profile
Get the profile of the currently authenticated user (requires VERDACCIO_TOKEN).
Uses endpoint: PROFILE_API_ENDPOINTS.get_profile → /-/npm/v1/user
list_tokens
List all API tokens for the authenticated user.
Uses endpoint: TOKEN_API_ENDPOINTS.get_tokens → /-/npm/v1/tokens
create_token
Create a new API token for the authenticated user.
Parameter | Type | Required | Description |
| string | yes | Current user password |
| boolean | no | Make token read-only (default false) |
| string[] | no | IP ranges to whitelist, e.g. |
Uses endpoint: TOKEN_API_ENDPOINTS.get_tokens → /-/npm/v1/tokens (POST)
delete_token
Delete an API token by its key.
Parameter | Type | Required | Description |
| string | yes | Token key identifier (from |
Uses endpoint: TOKEN_API_ENDPOINTS.delete_token → /-/npm/v1/tokens/token/:tokenKey
Example

Setup
1. Install and build
pnpm install
pnpm build2. Configure environment
Variable | Default | Description |
|
| Base URL of your Verdaccio instance |
| — | Bearer token for authenticated registries |
3. Add to your MCP client
The server config format is the same across all clients — only the config file location differs (see Compatible clients above).
{
"mcpServers": {
"verdaccio": {
"command": "npx",
"args": ["@verdaccio/mcp-server"],
"env": {
"VERDACCIO_URL": "http://your-verdaccio:4873",
"VERDACCIO_TOKEN": "your-token"
}
}
}
}Development
Testing locally without publishing
To connect your MCP client to the local source without publishing to npm, point it directly at the local file.
Option A — compiled (requires pnpm build after each change):
{
"mcpServers": {
"verdaccio": {
"command": "node",
"args": ["/path/to/mcp-server-verdaccio/dist/index.js"],
"env": {
"VERDACCIO_URL": "http://localhost:4873"
}
}
}
}Option B — TypeScript directly via tsx (no build step, recommended for dev):
{
"mcpServers": {
"verdaccio": {
"command": "npx",
"args": ["tsx", "/path/to/mcp-server-verdaccio/src/index.ts"],
"env": {
"VERDACCIO_URL": "http://localhost:4873"
}
}
}
}With option B, just save your changes and restart the MCP client — no build step needed.
Running standalone
# Run directly with tsx (no build step)
VERDACCIO_URL=http://localhost:4873 pnpm dev
# Build and run compiled output
pnpm build
pnpm start
# Run tests
pnpm test
pnpm test:watchReleasing
Add a changeset with pnpm changeset in any PR that should be released. Merging to main opens a "chore: release" PR; merging that PR publishes to npm.
Stack
@modelcontextprotocol/sdk— MCP server framework@verdaccio/middleware— Verdaccio API endpoint constantszod— Tool input schema validation
Available Tools
11 toolsadd_userB
Register a new user in the Verdaccio registry. Returns a Bearer token on success.
| Name | Required | Description | Default |
|---|---|---|---|
| password | Yes | Desired password | |
| username | Yes | Desired username |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full behavioral burden. It does disclose a meaningful side effect/return — a Bearer token issued on success — but says nothing about failure modes (username already taken), permission requirements, or whether the new user is authenticated afterward.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences with zero waste; the core action is front-loaded and the return value follows immediately.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema, so the description must cover return values, and it partially does by mentioning the Bearer token. However, with no annotations and a mutation-style tool, the absence of error behavior and auth/permission context leaves visible gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% (username and password both documented), so the schema already carries the parameter semantics. The description adds no additional meaning such as password constraints or username format rules, making the baseline 3 appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource: 'Register a new user in the Verdaccio registry.' This is clearly distinct from an authenticate-style tool like the sibling 'login', but the description never names that sibling or states the boundary explicitly.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this versus 'login' (the obvious alternative), nor any prerequisite such as whether registration is open or requires existing credentials. The agent must infer the entire usage context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
create_tokenC
Create a new API token for the currently authenticated user in Verdaccio
| Name | Required | Description | Default |
|---|---|---|---|
| cidr | No | CIDR ranges to whitelist for this token, e.g. ["192.168.1.0/24"] | |
| password | Yes | Current user password (required by Verdaccio to create tokens) | |
| readonly | No | Whether the token should be read-only (default false) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full behavioral burden. It implies an authenticated-session requirement via "currently authenticated user," but says nothing about whether the token secret is shown only once, whether creation is reversible, or any permission/rate constraints on a credential-minting operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence with no filler or repetition. It is efficient, though its brevity reflects thin content rather than disciplined density.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a security-sensitive creation tool with no annotations and no output schema, the description should at least note the required password and the one-time disclosure of the generated secret. Those gaps leave an agent without the context needed to call or handle the result correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, and the schema already explains cidr, password, and readonly with examples and defaults. The description adds no additional parameter meaning, so the baseline of 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description gives a specific verb+resource ("Create a new API token") scoped to "the currently authenticated user in Verdaccio," which clearly separates it from list_tokens and delete_token by name. It stops short of explicit sibling differentiation in prose, so a 4 rather than a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no guidance on when to choose this over list_tokens/delete_token, no prerequisites (e.g. that a valid password is mandatory), and no mention of what happens if a token already exists. The agent gets no routing or precondition information beyond the tool name.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
delete_tokenC
Delete an API token by its key from Verdaccio
| Name | Required | Description | Default |
|---|---|---|---|
| tokenKey | Yes | The token key to delete (not the token value, but the key identifier) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden, yet it omits that deletion is irreversible, what permissions are required, and what happens on an unknown key. It confirms the operation is a mutation but discloses nothing about its consequences.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence with no filler; the verb and scope come first. It is efficient, though it is short enough that the missing behavioral caveats are absent rather than trimmed.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a destructive, one-parameter tool with no annotations and no output schema, the description should at minimum warn about irreversibility and required auth. None of that is present, leaving key operational questions unanswered.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% and the schema already clarifies that tokenKey is the key identifier rather than the token value. The description's 'by its key' restates that distinction without adding format or constraint details, so baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Delete an API token') and adds scoping detail ('by its key from Verdaccio'), which separates it from create_token and list_tokens. It stops short of explicitly naming those siblings, so it is clear but not fully differentiated.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no explicit when-to-use or when-not-to-use guidance, and no mention of alternatives like list_tokens for finding the key first. Usage is only implied by the verb itself.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
find_packageB
Search for a private package in the Verdaccio registry by name or keyword
| Name | Required | Description | Default |
|---|---|---|---|
| size | No | Max number of results to return (default 20) | |
| query | Yes | Package name or search term |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full disclosure burden. It signals a read-style lookup, but says nothing about authentication against a private registry, rate limits, result ordering, or whether only visible/authorized packages are searched — all meaningful gaps for a registry search.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence with no filler. It identifies the action, the resource, and the match modes in one pass, which is the right size for a simple two-parameter tool.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a low-complexity read tool with no nested params, the definition is minimally adequate. With no output schema and no annotations, it should at least hint at what a result contains or that results are paginated/limited, which it does not.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so both query and size are documented structurally; baseline 3 applies. The phrase 'by name or keyword' adds a little meaning to query (it accepts either an exact name or free-text term), but size/default behavior is left entirely to the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (search) and a clearly scoped resource (private packages in the Verdaccio registry) plus the matching modes (name or keyword). It implicitly contrasts with retrieval-style siblings like get_package, but never names an alternative, so full sibling differentiation is missing.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is only implied: an agent can infer this is the discovery tool for when the exact package name isn't known, contrasting with get_package. There is no explicit when-to-use statement, no prerequisites, and no named alternative to route to.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_packageB
Get detailed metadata for a specific package (and optionally a specific version) from Verdaccio
| Name | Required | Description | Default |
|---|---|---|---|
| package | Yes | Package name, e.g. my-lib or @scope/my-lib | |
| version | No | Specific version, e.g. 1.2.3 (omit for latest) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full behavioral burden. 'Get' plus 'metadata' implies a safe read and the parenthetical discloses the version-optional, latest-by-default behavior, but nothing is said about whether a registry/auth context is required, what happens when the package or version does not exist, or how large the metadata payload is.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single sentence with the verb, resource, optional scope, and source system front-loaded. There is no filler and nothing redundant.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a two-parameter read tool with no annotations and no output schema, the description is minimally adequate: it establishes what is fetched but not what metadata fields come back or any failure behavior. An agent could call it correctly, but not predict the response.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% and both parameters already carry examples and the 'omit for latest' note, so the schema does the heavy lifting. The description only restates that version is optional and adds no syntax or format detail beyond it.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Get detailed metadata for a specific package') and clarifies the optional version scope, so the operation is unambiguous. It does not differentiate from the sibling find_package, which leaves the agent to guess which one to reach for when the exact package name is uncertain.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives no when-to-use guidance, no prerequisites, and no exclusions. With find_package sitting in the sibling list, the boundary between lookup-by-name and search is never drawn, so the agent must infer the intended context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_profileA
Get the profile of the currently authenticated user in Verdaccio
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the burden, and 'currently authenticated user' does imply this is a read of the caller's own identity and that authentication is required. However, it says nothing about what is returned, whether the call can fail for anonymous users, or any other behavioral trait.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single short sentence with the verb and scope front-loaded and zero filler. Every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter identity lookup this is minimally adequate, but with no output schema the description could reasonably indicate what profile fields are returned so the agent knows what to expect. It leaves the caller to discover the response shape empirically.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool takes zero parameters, so the baseline of 4 applies; there are no arguments whose semantics could be clarified. Nothing in the description is needed to compensate for schema gaps.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Get the profile') and scopes it to 'the currently authenticated user in Verdaccio', which separates it from package-oriented siblings like get_package and token-oriented siblings like list_tokens. It is clear what the tool does, though the sibling differentiation is implicit rather than explicit.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is implied by 'currently authenticated user' (call it when you need the logged-in identity), but the description never states when to use this versus alternatives like list_tokens or add_user, nor any prerequisite such as being logged in first. No explicit exclusions or context are offered.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_tokensA
List all API tokens for the currently authenticated user in Verdaccio
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It discloses the auth scoping ('currently authenticated user'), which tells the agent a session is required, but says nothing about pagination, ordering, or whether token secrets are included in the output.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence with no filler. The scope qualifier is placed at the end where it reads naturally, and no sentence is wasted.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple parameterless list tool with no output schema, the description says what is listed and whose tokens they are, which is enough to invoke it correctly. Minor gaps around return contents and pagination remain.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool takes zero parameters, so there are no parameter semantics to document - the baseline for a parameterless tool applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (List) and resource (API tokens) with a clear scope ('currently authenticated user in Verdaccio'). The verb alone distinguishes it from create_token and delete_token siblings, though it does not explicitly name them.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is implied by the description - view your own tokens - but there is no explicit when-to-use or when-not guidance, and no reference to alternatives like get_profile. For a zero-param read tool this is minimal but acceptable.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
loginB
Authenticate with the Verdaccio registry using username and password. Returns a Bearer token.
| Name | Required | Description | Default |
|---|---|---|---|
| password | Yes | Verdaccio password | |
| username | Yes | Verdaccio username |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden. It usefully discloses the return value (a Bearer token), which matters since there is no output schema. However, it is silent on invalid-credential behavior, token lifetime, and any auth or rate-limit constraints.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two tight sentences with zero waste, front-loading the action and following with the return value. Nothing is redundant or padded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple two-parameter auth tool, the description covers the essentials and compensates for the missing output schema by naming the returned token. It falls short on error behavior and token lifecycle, which an agent calling it may need to know.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so both parameters (username, password) are already fully documented in the schema. The description merely restates that username and password are used, adding no new semantics; baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (authenticate) and resource (Verdaccio registry) plus the credentials used, so the operation is immediately clear. It does not, however, distinguish itself from the sibling create_token, which may also yield a token — a differentiation an agent would benefit from.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description says nothing about when to call login versus alternatives such as create_token, add_user, or list_tokens. Usage is only weakly implied by the action itself; no prerequisites or exclusions are given.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
publish_packageC
Publish a package to the Verdaccio registry by name and version. Generates the required package metadata automatically.
| Name | Required | Description | Default |
|---|---|---|---|
| tag | No | Dist-tag to apply (default: latest) | |
| name | Yes | Package name, e.g. my-lib or @scope/my-lib | |
| version | Yes | Version to publish, e.g. 1.0.0 |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full behavioral burden. It adds one useful detail ('generates the required package metadata automatically'), but omits auth requirements, what happens when a version already exists, and any failure/overwrite semantics for what is clearly a mutating operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences, front-loaded with the action and resource, with no filler. The second sentence carries real information about automatic metadata generation rather than padding.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a mutation tool with no annotations and no output schema, the description should cover authentication needs and conflict behavior. It is silent on both, leaving an agent unable to predict failure modes even though the parameter surface itself is fully covered by the schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents name, version, and the tag default of 'latest'. The description reinforces that name and version are the key inputs but adds no format or constraint detail beyond the schema, making the baseline 3 appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource ('Publish a package to the Verdaccio registry by name and version'), so an agent immediately knows what the tool does. It does not name or distinguish itself from the obvious sibling unpublish_package, but the verb alone makes the distinction unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no when-to-use or when-not-to-use guidance and no mention of prerequisites, even though siblings include login, add_user, and create_token, strongly implying authentication is required before publishing. The agent gets no routing or precondition information.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
start_registryA
Start the Verdaccio registry (if not already running) and return its URL. When no VERDACCIO_URL is configured, an embedded registry is started automatically on a random local port.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does well: it discloses idempotency ('if not already running'), the return value, and the conditional embedded-registry behavior keyed on VERDACCIO_URL. It omits auth requirements, blocking behavior, and whether the random port is stable across calls.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two tight sentences with the action and return value front-loaded, followed by the conditional fallback. No filler or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-param, no-annotation tool with no output schema, the description covers the action, idempotency, and return value. It could say more about the port's persistence and auth expectations, but the core operational picture is complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool takes zero parameters, so the schema itself imposes no documentation burden; baseline is 4. The description adds no parameter detail, but none is needed for a parameterless lifecycle call.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (Start) and resource (the Verdaccio registry), plus the return value (its URL). It is unambiguous and clearly distinct from the package/token/auth siblings, which operate on registry contents rather than the registry process itself.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explains the operating context clearly: start only if not already running, and the fallback behavior when VERDACCIO_URL is absent. There is no explicit when-to-use-vs-alternative phrasing, but no real alternative exists for this lifecycle action, so context is adequate.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
unpublish_packageB
Unpublish a specific version of a package from the Verdaccio registry. Removes the version from metadata and deletes its tarball.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Package name, e.g. my-lib or @scope/my-lib | |
| version | Yes | Version to unpublish, e.g. 1.0.3 |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden. It does disclose the concrete effects ('Removes the version from metadata and deletes its tarball'), which is genuinely useful destructive-effect context, but it omits auth/permission requirements, irreversibility, and any guard conditions (e.g. cannot unpublish the last remaining version).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences, zero filler, with the resource and the destructive consequence front-loaded. Every clause earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a destructive mutation tool with no annotations and no output schema, the description covers the core effect but leaves out auth requirements, failure modes, and irreversibility. It is adequate but not complete for a delete-style operation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so both parameters ('name' and 'version') are already fully documented with examples in the schema. The description only echoes 'specific version' and adds no syntax or format detail beyond the schema, so the baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb ('Unpublish') and resource ('a specific version of a package from the Verdaccio registry') with clear scope limited to a single version rather than the whole package. The verb inherently contrasts with the sibling publish_package, though no sibling is named explicitly.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description says what the tool does but never states when to use it, when not to, or what prerequisites/alternatives exist. Usage is only implied by the tool name, so the agent gets no routing guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
11 tool updates
v0.1.0- First observed
add_user - First observed
create_token - First observed
delete_token - First observed
find_package - First observed
get_package - First observed
get_profile - First observed
list_tokens - First observed
login - First observed
publish_package - First observed
start_registry - First observed
unpublish_package
TDQS
Scored across 11 tools
Each tool targets a clearly distinct resource+action: package lifecycle (publish/unpublish/get/find), registry lifecycle (start_registry), user auth (add_user/login/get_profile), and token management (list/create/delete). The only near-neighbors, add_user vs login and find_package vs get_package, are differentiated by register-vs-authenticate and search-vs-detail respectively.
Nearly all tools follow a clean snake_case verb_noun pattern (publish_package, create_token, get_profile). The single-verb 'login' is a minor deviation from the verb_noun convention but is still readable and unambiguous.
11 tools sit comfortably in the well-scoped 3-15 range and each maps to a needed registry operation. No redundant or filler tools are present.
Covers the main registry workflows: publish/unpublish, discovery, authentication, and full token CRUD. Minor gaps exist (no whole-package removal or metadata update beyond publish, no logout), but these are workable rather than blocking.
Maintenance
Related MCP Connectors
MCP server for AI agents to plan, verify, and deploy Cloudflare-native apps.
An MCP server that gives your AI access to the source code and docs of all public github repos
Search and install 4,000+ security-scanned MCP servers from inside any MCP-aware AI client.
MCP server for OpenAI API (chat completions, image generation, embeddings) via AceDataCloud
Related MCP Servers
- AlicenseBqualityBmaintenanceMCP server for npm package management — publish, install, audit, search, security & dependency health38198 npm1MIT

@lpm-registry/mcp-serverofficial
AlicenseAqualityCmaintenanceMCP server for the LPM package registry, enabling AI tools to search, browse source code, install packages, check quality, and more.173 npmISC- AlicenseAqualityCmaintenanceMCP server that provides npm package information for AI agents during TypeScript development.711 npm1MIT
- AlicenseAqualityDmaintenanceMCP server providing npm registry search, package details, dependency auditing, bundle size estimation, and package comparison tools for AI agents.543 npmMIT