What is the purpose of this server?
It fetches npm package information using the `getNpmPackageInfo` tool and is intentionally vulnerable to serve as an educational tool for MCP Server security.
MCP Server for NPM Package Info
@snyk-labs
Basic information
About MCP Server for NPM Package Info
An MCP server for NPM JavaScript Package Management tools
MCP Server for NPM Package Info config
No standard config provided
This server doesn't expose a parseable MCP config block in its README. See the repository for install instructions.
RepositoryMCP Server for NPM Package Info tools
Tool list not available yet
This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.
We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.
Overview
What is MCP Server for NPM Package Info?
A Model Context Protocol server that provides a tool to fetch npm package information. It is intended as an educational tool for MCP Server security and uses HTTP transport for remote connections.
How to use MCP Server for NPM Package Info?
Install dependencies with npm install and start the server with npm start. The server listens on port 3000 by default, but you can set the PORT environment variable (e.g., PORT=3500 npm start). Configure the server in your Agent MCP configuration as an HTTP endpoint.
Key features of MCP Server for NPM Package Info
- Exposes a
getNpmPackageInfotool via MCP - Uses HTTP (Streamable HTTP) transport for remote connections
- Returns structured package information
- Supports session management for stateful connections
- Intentionally vulnerable for educational security training
Use cases of MCP Server for NPM Package Info
- Looking up npm package details from an AI agent or IDE
- Teaching MCP server security concepts in a controlled environment
- Integrating package info retrieval into MCP‑compatible workflows
Frequently asked questions
How do I change the port the server runs on?
Set the `PORT` environment variable before starting, e.g., `PORT=3500 npm start`. The default port is 3000.
What data does the server return?
The server returns a JSON object containing all available information about the requested npm package, as returned by the npm registry.
What transport does the server use?
It uses HTTP (Streamable HTTP) transport for remote connections and supports session management for stateful connections.
Does the server require authentication?
The README does not mention any authentication mechanism. Note that the server is intentionally vulnerable for educational purposes.
More Other MCP servers
Glasswarp
GlasswarpSee and control a real Windows PC you own — from any MCP client, locally or remotely. Observe (UIA + screenshots), click/type/drag/scroll, launch apps, owner Live View. BYOH: your machine, your key.
N
Next Generation Movers: free moving quotes (remote MCP)
Next Generation MoversFree moving quotes for AI agents from Next Generation Movers, a licensed interstate mover (USDOT 3764697). US long-distance nationwide and local DC/MD/VA. Indicative ballpark price and booking options; optional $0.01 x40
MaxKB
1Panel-dev🔥 MaxKB is an open-source platform for building enterprise-grade agents. 强大易用的开源企业级智能体平台。
22.0K
DeepMark
DeepMark helps teachers deliver rapid, consistent marking with meaningful feedback for every student — in a fraction of the time. What once took a week, now takes one free period.
Screenpipe
screenpipeYC (S26) | Open Computer History | Continuously record your company computer work, map your workflows, help you find work worth automating, and power your agents' context
22.0K
Comments