Log inSubmit server
Package Registry MCP logo

Package Registry MCP

by artmann

Search package registries, inspect package metadata and versions, and check GitHub security advisories through MCP.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install Package Registry MCP

Pick your client, then add it in one click or paste the config.

STDIONode.js
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "artmann-package-registry-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "package-registry-mcp"
      ]
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

Automated check passed— started and listed 16 tools correctly (23d ago).

Overview

The artmann/package-registry-mcp MCP server gives AI assistants access to package metadata, registry searches, version histories, and security advisories. It queries NPM, crates.io, NuGet, PyPI, Go module sources, and the GitHub Security Advisory Database through separate MCP tools. Use it when an agent needs current dependency information or vulnerability checks without relying on static training data.

Use cases

  • Search NPM, Cargo, or NuGet packages by keyword
  • Inspect dependency metadata before adding a package
  • Compare available versions for a package or module
  • Check a package for known security advisories
  • Retrieve details for a Go module or PyPI package

Key features

  • NPM, crates.io, NuGet, PyPI, and Go package metadata
  • Package search for NPM, Cargo, and NuGet
  • Version history listing with configurable limits
  • GitHub Security Advisory search and lookup
  • Package-specific vulnerability checks

Tools16

What Package Registry MCP lets your agent do. Expand a tool for its parameters.

Verified live~1.5k tokens of context

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked 2d ago

Recent health check succeeded.

18/18 checks healthy over the last 78d

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 9d ago via OSV.dev · package-registry-mcp (npm)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars39Stargazers on the source repository.
npm downloads5.6kPackage downloads in the last 30 days.
Last commit10mo agoMost recent push to the default branch.
Availability100%Our rolling endpoint + install checks that succeeded.
Install checkPassedOur sandbox started it and listed its tools.
Tools exposed16Callable tools this server registers over MCP.
Directory activity4 viewsConfig copies, upvotes, and views on AllMCPs.

How Package Registry MCP works

What artmann/package-registry-mcp MCP server does

The artmann/package-registry-mcp MCP server exposes package registry and security research functions to MCP-compatible AI clients. It supports NPM, Rust crates on crates.io, NuGet, PyPI, and Go modules. The server also connects to the GitHub Security Advisory Database for vulnerability searches and package-specific advisory lookups.

Package detail tools return registry metadata such as descriptions, versions, licenses, links, dependencies, maintainers, download information, or language-specific package fields where the source provides them. Version tools return release histories, with configurable result limits. The available data differs by ecosystem.

How it works

An MCP client calls a tool with a package name, module path, search query, advisory identifier, or filter. Registry-backed operations retrieve information from the relevant package source, while advisory operations query GitHub’s security advisory data.

NPM, Cargo, and NuGet each provide search, detail, and version-listing tools. PyPI and Go do not expose the search APIs used by this project, so their support is limited to exact package or module details and version lists. PyPI searches must be performed through the PyPI website, and Go searches through pkg.go.dev.

Security tools support searching GitHub advisories by fields such as ecosystem, severity, vulnerability type, or CVE ID. A GHSA-specific tool retrieves one advisory by its identifier, and the package advisory tool checks a named package for known security issues.

Setup and configuration

The artmann/package-registry-mcp MCP server runs through npx and does not document required environment variables. In Cursor, add an MCP server named package-registry with npx as the command and package-registry-mcp as its argument. Claude Desktop uses the same command and argument in its claude_desktop_config.json under mcpServers.

Claude Code can register it with claude mcp add -s user package-registry npx package-registry-mcp. Restart Claude Desktop after editing its configuration. The README also provides platform-specific locations for the Claude Desktop configuration file on macOS and Windows.

Tools and capabilities

The artmann/package-registry-mcp MCP server provides these capability groups:

  • NPM: search packages, retrieve package details, and list versions.
  • Cargo: search crates.io, retrieve crate details, and list versions.
  • NuGet: search packages, retrieve package details, and list versions.
  • PyPI: retrieve package details and list versions.
  • Go: retrieve module details and list versions.
  • Security: search GitHub advisories, retrieve a GHSA record, and list advisories affecting a package.

Search and version-listing tools accept limits within the ranges documented by the project. Exact-detail tools require an exact package name, except Go details and version queries, which use a module path.

Limitations and notes

PyPI and Go package search are not available through this server because the referenced upstream services do not provide the required JSON search APIs. Use the PyPI or pkg.go.dev websites for those searches, then pass an exact package name or module path to the relevant MCP tool.

Results and fields depend on the source registry. For example, some detail tools include dependencies, download counts, framework targets, classifiers, repository links, or vulnerability information, while others expose a different set of metadata.

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about Package Registry MCP

artmann/package-registry-mcp is an MCP server that connects AI assistants to NPM, crates.io, NuGet, PyPI, Go module sources, and GitHub Security Advisories. Its main tools search registries, retrieve package details, list versions, find vulnerabilities, and fetch individual advisories by GHSA ID.

Install it by configuring an MCP client to run `npx package-registry-mcp`. Cursor and Claude Desktop use that command with `package-registry-mcp` as an argument, while Claude Code supports `claude mcp add -s user package-registry npx package-registry-mcp`.

Yes, artmann/package-registry-mcp works with Cursor. Add a server named `package-registry` in Cursor’s MCP settings, use `npx` as the command, and set `package-registry-mcp` as the argument.

No, it does not provide PyPI or Go package search tools. PyPI searches must use pypi.org, and Go searches must use pkg.go.dev; after finding an exact name or module path, you can use this server’s detail and version tools.

Related MCP servers

All in Databases All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewPackage Registry MCP AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/artmann-package-registry-mcp?style=directory)](https://allmcps.com/mcp/artmann-package-registry-mcp)
HTML Embed
<a href="https://allmcps.com/mcp/artmann-package-registry-mcp"><img src="https://allmcps.com/api/badge/artmann-package-registry-mcp?style=directory" alt="Package Registry MCP on AllMCPs" /></a>