NPMScan MCP Server: Install & Setup

Install NPMScan in Claude Code

Claude Code

claude mcp add --transport http salemalem-npmscan https://npmscan.com/api/mcp

mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)

{
  "mcpServers": {
    "salemalem-npmscan": {
      "url": "https://npmscan.com/api/mcp"
    }
  }
}

Frequently asked questions

What does the NPMScan MCP server do?

Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups

Is the NPMScan MCP server free?

The server is free, but you will likely need an account. The server itself is free, but it connects to a service that needs an account or API key, which may have paid tiers. Check the provider for current pricing.

Does NPMScan run locally or remotely?

Remote. Hosted by the provider. You connect with a URL, nothing to install.

How do I add NPMScan to Claude Code?

Run: claude mcp add --transport http salemalem-npmscan https://npmscan.com/api/mcp

More version control MCP servers

View all

Azure Devops

398

Tiberriver256/mcp-server-azure-devops

Azure DevOps integration for repository management, work items and pipelines.

LocalAccount neededTypeScript

Best of Agent Harnesses

1.4k

RyanAlberts/best-of-Agent-Harnesses

Agent-harness picks, decision guides, setup templates, and skills; live GitHub/HN discovery.

LocalFree

Git Ingest

314

adhikasp/mcp-git-ingest

Read and analyze GitHub repositories.

LocalFreePython

SoloMD

1.5k

zhitongblog/solomd

Read and search a folder of Markdown notes: search, backlinks, tags, tasks, outlines, git history.

LocalFree

Backlot

264

brekkylab/backlot

Local emulator for Slack, Gmail, Drive, GitHub, Jira, Notion, S3 and more, with per-document ACLs

LocalFree

OpenOSINT

1.8k

OpenOSINT/OpenOSINT

AI-powered OSINT agent & MCP server. 21 tools: email, breach, IP, WHOIS, DNS, Shodan, GitHub & more.

LocalAccount needed