RemoteFree

NPMScan MCP server

Checks npm packages for known vulnerabilities, malware, typosquats, risky install scripts and maintainer takeovers.

Website

Install NPMScan in Claude Code

Claude Code
claude mcp add --transport http npmscan https://npmscan.com/api/mcp
mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)
{
  "mcpServers": {
    "npmscan": {
      "url": "https://npmscan.com/api/mcp"
    }
  }
}

Frequently asked questions

What does the NPMScan MCP server do?

Checks npm packages for known vulnerabilities, malware, typosquats, risky install scripts and maintainer takeovers.

Is the NPMScan MCP server free?

Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.

Does NPMScan run locally or remotely?

Remote. Hosted by the provider. You connect with a URL, nothing to install.

How do I add NPMScan to Claude Code?

Run: claude mcp add --transport http npmscan https://npmscan.com/api/mcp

More security & identity MCP servers

View all

Opsecforge Tools

0

cyberdroid2077/opsecforge-tools/opsecforge-mcp

Local stdio server that keeps secrets out of coding-agent context: redact_file takes a path and returns only redacted content, scan_secrets checks staged changes before commit, plus offline webhook signature verification and JWT inspection. No network calls; optional Claude Code hook blocks direct .env/private-key reads. Redaction is heuristic.

LocalFreeTypeScript

Nobulex

arian-gogani/nobulex

Proof-of-behavior enforcement for AI agents: define permit/forbid/require rules, enforce them at runtime and keep hash-chained, tamper-evident audit logs.

LocalFreeTypeScript

PG1 Threat Intelligence

Agent threat intel: wallet sanctions screening, wallet and domain age, hostname reputation; paid STIX 2.1 feed via x402.

RemotePaid service

NetAPI

Domain intelligence: compromised domain and IP checks, TLD stats, Top 1M ranks, new domains, registrars and DNS.

RemoteAccount needed

Phishunt

Public phishing-domain feed: check a domain, search detections by brand, and pivot on campaigns and certs.

RemoteFree

Movahedi Privacy

Canadian privacy compliance: enforcement actions, glossary and Law 25 checks.

RemoteFree