# artmann/package-registry-mcp [Health: Active]

**Category:** 🗄️ Databases  
**Repository:** https://github.com/artmann/package-registry-mcp  
**GitHub Stars:** 39  
**npm Downloads (last month):** 5631  
**Views:** 5  
**Installs:** 0  
**Upvotes:** 0  
**Directory Page:** https://allmcps.com/mcp/artmann-package-registry-mcp

## Description
MCP server for searching and getting up-to-date information about NPM, Cargo, PyPi, and NuGet packages.

## Tools
Capabilities this server exposes over MCP:

- **get-cargo-package-details** — Get detailed information about a specific Cargo package
- **search-cargo-packages** — Search the Cargo registry for packages
- **list-cargo-package-versions** — List all versions of a specific Cargo package
- **get-github-advisory** — Get detailed information about a specific GitHub Security Advisory by its GHSA ID (e.g., GHSA-grv7-fg5c-xmjg).
- **search-github-advisories** — Search the GitHub Security Advisory Database for vulnerabilities. Filter by ecosystem (npm, pip, maven, etc.), severity, type, or CVE ID.
- **get-package-advisories** — Get all security advisories affecting a specific package. Use this to check if a package like "braces" or "lodash" has known vulnerabilities.
- **get-golang-package-details** — Get detailed information about a specific Go module/package
- **list-golang-package-versions** — List all versions of a specific Go module/package
- **get-npm-package-details** — Get detailed information about a specific NPM package
- **search-npm-packages** — Search the NPM registry for packages
- **list-npm-package-versions** — List all versions of a specific NPM package
- **get-nuget-package-details** — Get detailed information about a specific NuGet package
- **search-nuget-packages** — Search the NuGet registry for packages
- **list-nuget-package-versions** — List all versions of a specific NuGet package
- **get-pypi-package-details** — Get detailed information about a specific PyPI package
- **list-pypi-package-versions** — List all versions of a specific PyPI package

## Claude Desktop Quick Installation
Install path detected from listing signals. Uses `npx` (confidence: high):

```json
"mcpServers": {
  "package-registry-mcp": {
    "command": "npx",
    "args": ["-y","package-registry-mcp"]
  }
}
```

## Documentation

## What artmann/package-registry-mcp MCP server does

The artmann/package-registry-mcp MCP server exposes package registry and security research functions to MCP-compatible AI clients. It supports NPM, Rust crates on crates.io, NuGet, PyPI, and Go modules. The server also connects to the GitHub Security Advisory Database for vulnerability searches and package-specific advisory lookups.

Package detail tools return registry metadata such as descriptions, versions, licenses, links, dependencies, maintainers, download information, or language-specific package fields where the source provides them. Version tools return release histories, with configurable result limits. The available data differs by ecosystem.

## How it works

An MCP client calls a tool with a package name, module path, search query, advisory identifier, or filter. Registry-backed operations retrieve information from the relevant package source, while advisory operations query GitHub’s security advisory data.

NPM, Cargo, and NuGet each provide search, detail, and version-listing tools. PyPI and Go do not expose the search APIs used by this project, so their support is limited to exact package or module details and version lists. PyPI searches must be performed through the PyPI website, and Go searches through pkg.go.dev.

Security tools support searching GitHub advisories by fields such as ecosystem, severity, vulnerability type, or CVE ID. A GHSA-specific tool retrieves one advisory by its identifier, and the package advisory tool checks a named package for known security issues.

## Setup and configuration

The artmann/package-registry-mcp MCP server runs through `npx` and does not document required environment variables. In Cursor, add an MCP server named `package-registry` with `npx` as the command and `package-registry-mcp` as its argument. Claude Desktop uses the same command and argument in its `claude_desktop_config.json` under `mcpServers`.

Claude Code can register it with `claude mcp add -s user package-registry npx package-registry-mcp`. Restart Claude Desktop after editing its configuration. The README also provides platform-specific locations for the Claude Desktop configuration file on macOS and Windows.

## Tools and capabilities

The artmann/package-registry-mcp MCP server provides these capability groups:

- NPM: search packages, retrieve package details, and list versions.
- Cargo: search crates.io, retrieve crate details, and list versions.
- NuGet: search packages, retrieve package details, and list versions.
- PyPI: retrieve package details and list versions.
- Go: retrieve module details and list versions.
- Security: search GitHub advisories, retrieve a GHSA record, and list advisories affecting a package.

Search and version-listing tools accept limits within the ranges documented by the project. Exact-detail tools require an exact package name, except Go details and version queries, which use a module path.

## Limitations and notes

PyPI and Go package search are not available through this server because the referenced upstream services do not provide the required JSON search APIs. Use the PyPI or pkg.go.dev websites for those searches, then pass an exact package name or module path to the relevant MCP tool.

Results and fields depend on the source registry. For example, some detail tools include dependencies, download counts, framework targets, classifiers, repository links, or vulnerability information, while others expose a different set of metadata.

_Full upstream README: https://allmcps.com/mcp/artmann-package-registry-mcp/readme_