Package Intel MCP

Máy chủ MCP không cần khóa cung cấp cho tác nhân AI thông tin gói npm/PyPI/crates.io: siêu dữ liệu, phiên bản, mức độ phổ biến, phụ thuộc, tình trạng và khuyến cáo bảo mật. Có gói miễn phí.

GitHubDùng thử MCP nàyĐược tài trợ

Tài liệu

Package Intel MCP — by Datakoot

Software supply-chain intelligence for AI agents — as MCP tools your agent can call mid-task, so it can vet a dependency before it installs it. Covers npm, PyPI and crates.io. No API keys.

Tools

ToolWhat it doesSource
package_infoMetadata for a package: description, latest version, license, homepage & repo linksnpm / PyPI / crates.io
package_versionsFull version history with release datesnpm / PyPI / crates.io
package_downloadsDownload counts and popularity signalnpm / PyPI / crates.io
package_dependenciesDirect dependencies for a given versiondeps.dev
package_healthHealth signals: OpenSSF Scorecard, stars, dependentsdeps.dev
package_searchSearch for packages by keywordnpm / PyPI / crates.io

Every tool accepts an ecosystem of npm, pypi, or crates. No API keys required.

Quick start

claude mcp add --transport http package-intel https://package.datakoot.com/mcp

Or point any MCP client at https://package.datakoot.com/mcp.

Try it in 10 seconds — no key, no signup

Paste this into a terminal:

curl -s https://package.datakoot.com/mcp \
  -H 'content-type: application/json' \
  -H 'accept: application/json, text/event-stream' \
  -d '{"jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": {"name": "package_health", "arguments": {"ecosystem": "npm", "name": "express"}}}'

You get a supply-chain health snapshot for the npm package express — versions, downloads, dependencies, maintenance signals — no API key, nothing to sign up for.

Or point any MCP client at the URL and just ask your agent, in plain language:

  • "How healthy is the npm package express?"
  • "Before I add left-pad, is it actively maintained and widely used?"

Data & attribution

Data comes from the public registry APIs for npm, PyPI and crates.io, plus deps.dev (Google Open Source Insights, CC-BY 4.0) for dependency graphs and OpenSSF Scorecard health signals. Package data is served from official public APIs and is informational.

Part of Datakoot — keyless intelligence APIs for AI agents.