广告合作
MCP.so
登录

NPM Sentinel MCP Server

@Nekzus

代码仓库主页

基本信息

分类

其他

许可证

MIT

传输方式

stdio

作者

Nekzus

关于 NPM Sentinel MCP Server

A powerful Model Context Protocol (MCP) server that revolutionizes NPM package analysis through AI.

#npm#mcp#npm-package#mcp-server

NPM Sentinel MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "npm-sentinel-mcp": {
      "command": "docker",
      "args": [
        "build",
        "-t",
        "nekzus/npm-sentinel-mcp",
        "."
      ]
    }
  }
}

NPM Sentinel MCP Server 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is NPM Sentinel MCP?

NPM Sentinel MCP is a Model Context Protocol (MCP) server that integrates NPM package analysis with AI assistants like Claude and Anthropic AI. It provides real‑time intelligence on package security, dependencies, and performance to help developers make faster and safer package management decisions.

How to use NPM Sentinel MCP?

Install the server via NPX (npx -y @nekzus/mcp-server@latest), Docker, or deploy it on Smithery.ai. Configure it in your AI client (e.g., VS Code, Claude Desktop) by adding a server entry with the command above. The server supports both STDIO and HTTP streamable transports and exposes tools through the MCP protocol.

Key features of NPM Sentinel MCP

  • Version analysis and tracking
  • Dependency analysis and mapping
  • Advanced security scanning with recursive dependency checks
  • Strict input validation against Path Traversal, SSRF, Command Injection
  • Package quality metrics and score assessment
  • Download trends and statistics
  • TypeScript support verification
  • Package size analysis and maintenance metrics
  • Efficient caching with automatic invalidation on lockfile changes
  • Real‑time package comparisons

Use cases of NPM Sentinel MCP

  • Scan a package for known vulnerabilities before adding it to a project
  • Analyze and visualize the full transitive dependency tree of a package
  • Compare multiple packages on quality, downloads, and maintenance activity
  • Check TypeScript compatibility and bundle size impact of dependencies
  • Find alternative packages with better security or maintenance records

常见问题

1

How does the caching work?

The server automatically invalidates its cache when `pnpm-lock.yaml`, `package-lock.json`, or `yarn.lock` changes in your workspace. You can also force a fresh lookup by passing `ignoreCache: true` in the tool arguments.

2

What transport protocols are supported?

NPM Sentinel MCP supports both STDIO (local development) and HTTP streamable transport (via Smithery.ai). Your existing STDIO configuration continues to work without changes.

3

How do I configure a custom npm registry?

Set the `NPM_REGISTRY_URL` environment variable (default is `https://registry.npmjs.org`). In Smithery or Docker configurations, you can set it under the `config` object within the server definition.

4

Where do I find the Claude Desktop configuration file?

On Windows it is at `%APPDATA%\Claude\claude_desktop_config.json`, on macOS at `~/Library/Application Support/Claude/claude_desktop_config.json`. Linux is not officially supported for Claude Desktop.

5

What security protections does the server include?

The server enforces strict input validation guarding against Path Traversal, SSRF, and Command Injection attacks. It also runs rigorous schema validation with Zod and uses standardized error handling.

评论

其他 分类下的更多 MCP 服务器

der die das – German noun genders (Lingviko)

Lingviko

The article (der, die, das) of 90,000 German nouns, compounds included, plus a checker that finds wrong articles in German text (“mit der Zug” → dem). Uses dictionary data, not AI guessing. Free, no login.

Activepieces

activepieces

AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents

23.2K
P

PickFu MCP

PickFu MCP is a Model Context Protocol (MCP) server that connects AI assistants, developers, marketers, product managers, and AI agents to PickFu's consumer research platform. It enables users to create surveys, conduct

Screenpipe

screenpipe

YC (S26) | Open Computer History | Continuously record your company computer work, map your workflows, help you find work worth automating, and power your agents' context

22.0K

Volley.sh

Volley

A good sequence diagram can solve almost any communication problem in engineering. Volley lets your agent write them as plain text, with the real request and response payloads on every arrow. It checks its own syntax wi

广告合作