MCP Server for NPM Package Info

What is MCP Server for NPM Package Info?

A Model Context Protocol server that provides a tool to fetch npm package information. It is intended as an educational tool for MCP Server security and uses HTTP transport for remote connections.

How to use MCP Server for NPM Package Info?

Install dependencies with npm install and start the server with npm start. The server listens on port 3000 by default, but you can set the PORT environment variable (e.g., PORT=3500 npm start). Configure the server in your Agent MCP configuration as an HTTP endpoint.

Key features of MCP Server for NPM Package Info

• Exposes a getNpmPackageInfo tool via MCP
• Uses HTTP (Streamable HTTP) transport for remote connections
• Returns structured package information
• Supports session management for stateful connections
• Intentionally vulnerable for educational security training

Use cases of MCP Server for NPM Package Info

• Looking up npm package details from an AI agent or IDE
• Teaching MCP server security concepts in a controlled environment
• Integrating package info retrieval into MCP‑compatible workflows