NPM Sentinel MCP is an AI-powered package analysis tool that delivers real-time intelligence on NPM packages to help developers make safer and faster dependency decisions. Key features of NPM Sentinel MCP: - Real-time security scanning with recursive dependency checks and vulnerability detection across package ecosystems - Version tracking and analysis with accurate version resolution capabilities - Dependency mapping and ecosystem awareness for frameworks like React - Package quality metrics including TypeScript support verification and bundle size analysis - Download trend monitoring and maintenance status tracking - Side-by-side package comparisons for informed decision-making - Automatic cache invalidation triggered by changes to package-lock.json, yarn.lock, or pnpm-lock.yaml - Strict input validation protecting against Path Traversal, SSRF, and Command Injection attacks - MCP integration with Claude and Anthropic AI for AI-assisted package analysis

NPM Sentinel MCP

[](https://smithery.ai/server/@Nekzus/npm-sentinel-mcp) [](https://github.com/Nekzus/npm-sentinel-mcp/actions/workflows/publish.yml) [](https://www.npmjs.com/package/@nekzus/mcp-server) [](https://www.npmjs.com/package/@nekzus/mcp-server) [](https://www.npmjs.com/package/@nekzus/mcp-server) [](https://hub.docker.com/r/mcp/npm-sentinel) [](https://deepwiki.com/Nekzus/npm-sentinel-mcp) [](https://paypal.me/maseortega)

A powerful Model Context Protocol (MCP) server that revolutionizes NPM package analysis through AI. Built to integrate with Claude and Anthropic AI, it provides real-time intelligence on package security, dependencies, and performance. This MCP server delivers instant insights and smart analysis to safeguard and optimize your npm ecosystem, making package management decisions faster and safer for modern development workflows.

Features

Note: The server provides AI-assisted analysis through MCP integration.

Caching and Invalidation

To ensure data accuracy while maintaining performance, the server implements robust caching strategies:

Example Usage (JSON-RPC)

When calling a tool, simply include ignoreCache: true in the arguments:

{
  "name": "npmVersions",
  "arguments": {
    "packages": ["react"],
    "ignoreCache": true
  }
}

Installation

Migration to HTTP Streamable

This MCP server now supports both STDIO and HTTP streamable transport. Your existing STDIO configuration will continue to work without changes.

New capabilities:

Development commands:

# Development server with playground
npm run dev
Build for HTTP
npm run build:http
Start HTTP server
npm run start:http

Install in VS Code

[](https://insiders.vscode.dev/redirect?url=vscode%3Amcp%2Finstall%3F%257B%2522name%2522%253A%2522npm-sentinel%2522%252C%2522config%2522%253A%257B%2522command%2522%253A%2522npx%2522%252C%2522args%2522%253A%255B%2522-y%2522%252C%2522%2540nekzus%252Fmcp-server%2540latest%2522%255D%257D%257D) [](https://insiders.vscode.dev/redirect?url=vscode-insiders%3Amcp%2Finstall%3F%257B%2522name%2522%253A%2522npm-sentinel%2522%252C%2522config%2522%253A%257B%2522command%2522%253A%2522npx%2522%252C%2522args%2522%253A%255B%2522-y%2522%252C%2522%2540nekzus%252Fmcp-server%2540latest%2522%255D%257D%257D)

Add this to your VS Code MCP config file. See VS Code MCP docs for more info.

{
  "servers": {
    "npm-sentinel": {
      "type": "stdio",
      "command": "npx",
      "args": ["-y", "@nekzus/mcp-server@latest"]
    }
  }
}

Smithery.ai Deployment (HTTP Streamable)

This MCP server now supports HTTP streamable transport through Smithery.ai for enhanced scalability and performance. You can deploy it dir