What is the purpose of this server?
It fetches npm package information using the `getNpmPackageInfo` tool and is intentionally vulnerable to serve as an educational tool for MCP Server security.
@snyk-labs
基本情報
An MCP server for NPM JavaScript Package Management tools
ツール一覧はまだありません
この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。
ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。
A Model Context Protocol server that provides a tool to fetch npm package information. It is intended as an educational tool for MCP Server security and uses HTTP transport for remote connections.
Install dependencies with npm install and start the server with npm start. The server listens on port 3000 by default, but you can set the PORT environment variable (e.g., PORT=3500 npm start). Configure the server in your Agent MCP configuration as an HTTP endpoint.
getNpmPackageInfo tool via MCPIt fetches npm package information using the `getNpmPackageInfo` tool and is intentionally vulnerable to serve as an educational tool for MCP Server security.
Set the `PORT` environment variable before starting, e.g., `PORT=3500 npm start`. The default port is 3000.
The server returns a JSON object containing all available information about the requested npm package, as returned by the npm registry.
It uses HTTP (Streamable HTTP) transport for remote connections and supports session management for stateful connections.
The README does not mention any authentication mechanism. Note that the server is intentionally vulnerable for educational purposes.
Painless E2E Automation for Mobile and Web
MCP Toolbox for Databases is an open source MCP server for databases.
A search tool helps dev to solve the naming things problem.
A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today!

DeepMark helps teachers deliver rapid, consistent marking with meaningful feedback for every student — in a fraction of the time. What once took a week, now takes one free period.
コメント