Patchwire

Hourly security advisories for JS, AI and web3 packages: ranges, fixes and exploit conditions.

View on monowire.dev

Hosted MCP Server

npx add-mcp 'https://patchwire.monowire.dev/mcp'

Installs into Claude Code, Codex, Cursor and more

Documentation

Your agent asks before it ships. Patchwire answers with the fix.

One server, every agent

MCP tools

5Package names in, fixes out

patchwire.monowire.dev/mcp

get_advisories Alerts for your packages

get_advisory One alert, in full

latest_safe Safe version per line

list_feed Latest alerts

get_platform_bulletins Platform bulletins

Listed on the official MCP Registry as dev.monowire/patchwire

Set up your agent

Claude Code. Set up in a minute.

One command adds the server, then a SessionStart hook: in every new session, Claude checks before it answers.

Without an agent

Feeds

The same alerts as the site in any RSS reader, bot or script: the 50 latest, every hour.

/feeds/all.json

Sources

All read

Repo advisories 23:43 UTC

Advisory database 23:43 UTC

Malware feed 23:43 UTC

Vendor feeds 23:43 UTC

Last 24 hours, one mark per read