広告掲載
MCP.so
ログイン

NPM Sentinel MCP Server

@Nekzus

リポジトリホームページ

基本情報

カテゴリ

その他

ライセンス

MIT

トランスポート

stdio

作者

Nekzus

NPM Sentinel MCP Server について

A powerful Model Context Protocol (MCP) server that revolutionizes NPM package analysis through AI.

#npm#mcp#npm-package#mcp-server

NPM Sentinel MCP Server の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "npm-sentinel-mcp": {
      "command": "docker",
      "args": [
        "build",
        "-t",
        "nekzus/npm-sentinel-mcp",
        "."
      ]
    }
  }
}

NPM Sentinel MCP Server のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is NPM Sentinel MCP?

NPM Sentinel MCP is a Model Context Protocol (MCP) server that integrates NPM package analysis with AI assistants like Claude and Anthropic AI. It provides real‑time intelligence on package security, dependencies, and performance to help developers make faster and safer package management decisions.

How to use NPM Sentinel MCP?

Install the server via NPX (npx -y @nekzus/mcp-server@latest), Docker, or deploy it on Smithery.ai. Configure it in your AI client (e.g., VS Code, Claude Desktop) by adding a server entry with the command above. The server supports both STDIO and HTTP streamable transports and exposes tools through the MCP protocol.

Key features of NPM Sentinel MCP

  • Version analysis and tracking
  • Dependency analysis and mapping
  • Advanced security scanning with recursive dependency checks
  • Strict input validation against Path Traversal, SSRF, Command Injection
  • Package quality metrics and score assessment
  • Download trends and statistics
  • TypeScript support verification
  • Package size analysis and maintenance metrics
  • Efficient caching with automatic invalidation on lockfile changes
  • Real‑time package comparisons

Use cases of NPM Sentinel MCP

  • Scan a package for known vulnerabilities before adding it to a project
  • Analyze and visualize the full transitive dependency tree of a package
  • Compare multiple packages on quality, downloads, and maintenance activity
  • Check TypeScript compatibility and bundle size impact of dependencies
  • Find alternative packages with better security or maintenance records

よくある質問

1

How does the caching work?

The server automatically invalidates its cache when `pnpm-lock.yaml`, `package-lock.json`, or `yarn.lock` changes in your workspace. You can also force a fresh lookup by passing `ignoreCache: true` in the tool arguments.

2

What transport protocols are supported?

NPM Sentinel MCP supports both STDIO (local development) and HTTP streamable transport (via Smithery.ai). Your existing STDIO configuration continues to work without changes.

3

How do I configure a custom npm registry?

Set the `NPM_REGISTRY_URL` environment variable (default is `https://registry.npmjs.org`). In Smithery or Docker configurations, you can set it under the `config` object within the server definition.

4

Where do I find the Claude Desktop configuration file?

On Windows it is at `%APPDATA%\Claude\claude_desktop_config.json`, on macOS at `~/Library/Application Support/Claude/claude_desktop_config.json`. Linux is not officially supported for Claude Desktop.

5

What security protections does the server include?

The server enforces strict input validation guarding against Path Traversal, SSRF, and Command Injection attacks. It also runs rigorous schema validation with Zod and uses standardized error handling.

コメント

「その他」の他のコンテンツ

Codelf

unbug

A search tool helps dev to solve the naming things problem.

14.2K
P

PickFu MCP

PickFu MCP is a Model Context Protocol (MCP) server that connects AI assistants, developers, marketers, product managers, and AI agents to PickFu's consumer research platform. It enables users to create surveys, conduct

ICSS

chokcoco

不止于 CSS

20.7K

Senso MCP for Joomla

sensomedia

Senso MCP turns a Joomla 5 or 6 site into a remote MCP server. It runs inside Joomla itself (no extra server, no Node.js bridge) and is secured with OAuth 2.1 and Joomla's own ACL. The free pack lets an AI assistant crea

The Living Bread

The Living Bread

A free remote MCP server for The Living Bread. Bible passages read word for word from a stored public domain text with an evidence label, keyword search and cross references, real churches, gatherings and prayer groups w

広告掲載