"npm" matching MCP servers:

Enables MCP-compatible AI applications to perform read-only npm package and project dependency safety scans, returning proceed, caution, or block verdicts without executing package code.

MCP security firewall (stdio): vet advertised tool definitions through static-scan → threat-feed → origin → pinning before they reach the model. Zero npm runtime deps. No secrets.

Security scanner for vibe coders that checks npm packages for known vulnerabilities before installation, integrating with AI coding tools like Claude Code and Cursor.

npm audit for MCP servers. Point it at an MCP server and get a security grade (A–F) covering missing auth, SSRF surface, high-privilege tools, prompt-injection-prone tool descriptions, and leaked secrets.

MCP server with intentionally malicious capabilities for testing Cisco AI Defense supply chain scanning.

Provides a keyless, unified view of developer registries (npm, PyPI, Docker Hub, VS Code Marketplace) with tools for package search, details, versions, downloads, dependency graphs, vulnerabilities, and security insights via the DevStack API.