Securityβ€’ MCP Alternatives Guide

Best Alternatives to Depscope

Looking for an alternative to Depscope? Whether you need a different runtime environment, custom authentication support, or alternative API integrations in the Security ecosystem, we have cataloged and compared the top alternative MCP servers below.

Browse all Security servers β†’View Depscope Specs β†’
Depscope logo
Target Reference Server

Depscope Overview

The cuttalo/depscope MCP server gives AI coding agents package intelligence before they recommend or install dependencies. It checks package existence, typosquatting, malicious activity, vulnerabilities, health, trust signals, compatibility, breaking changes, and known bugs across multiple ecosystems. The service is available through a hosted MCP endpoint or a local stdio process launched with npx, and it requires no authentication. Reach for it when an agent needs to validate an unfamiliar package, audit a dependency list, select a safer alternative, or resolve a package-related error.

Primary Use Cases for Depscope:
  • Validate packages before generating install commands
  • Audit dependency manifests for risky or invented packages
  • Find replacements for deprecated or unhealthy dependencies
  • Check compatibility before pinning a version stack

Specification Matrix: Depscope vs Alternatives

Direct comparison of key metrics, runtimes, authentication methods, and community popularity.

Server NameRuntimeAuthPricingGitHub StarsDownloadsAction
Depscope logoDepscope (Target)
npxNo auth requiredFree1β€”Current
A
Agent Security Scanner MCP
β€”β€”β€”123β€”
S
Shodan
β€”β€”β€”188β€”
E
EchelonGraph CVE & Exposure
β€”β€”β€”20β€”
Lazaretto MCP logoLazaretto MCPnpxβ€”β€”1β€”
AI Distiller MCP logoAI Distiller MCPβ€”β€”β€”172β€”
MCP Server logoMCP Serverβ€”β€”β€”7β€”
Intodns MCP Server logoIntodns MCP Servernpxβ€”β€”2β€”
Dechonet MCP logoDechonet MCPnpxβ€”β€”1β€”
4
4da MCP Server
β€”β€”β€”β€”β€”
Binary Ninja MCP logoBinary Ninja MCPβ€”β€”β€”4561
Qurl MCP logoQurl MCPβ€”β€”β€”4β€”
A
Auth0 MCP Server
β€”β€”β€”122β€”

Detailed Evaluation of Depscope Alternatives

A

Agent Security Scanner MCP

Runtime not confirmedSecurity

Scans agent-written code, MCP servers, prompts, actions, and dependencies for security risks and package hallucinations.

Key Features:
Project, file, and Git diff security scans
MCP server, prompt, and agent action checks
AI-suggested package existence verification
3 0 123
S

Shodan

Runtime not confirmedSecurity

Connects AI agents to Shodan for host reconnaissance, device search, DNS lookups, and CVE intelligence.

Key Features:
IP reconnaissance with ports, banners, TLS, cloud, and CVE data
Shodan device search with pagination and facets
Forward, reverse, and domain DNS intelligence
2 0 188
E

EchelonGraph CVE & Exposure

Runtime not confirmedSecurity

Keyless MCP access to CVE intelligence, KEV, EPSS, SBOM checks, advisories, and Shodan-derived exposure data.

Key Features:
Searches and summarizes fused CVE intelligence
Checks packages, CPE products, SBOMs, and lockfiles
Reports CISA KEV and EPSS history
3 0 20
Lazaretto MCP logo

Lazaretto MCP

Runtime: npxSecurity

Checks pinned dependencies and artifacts for malicious-package indicators and deterministic behavioral risks.

Key Features:
Lockfile checks for npm, Yarn, and pnpm
Known-bad SHA-256 hash lookup
Deterministic artifact behavioral analysis
4 0 1
AI Distiller MCP logo

AI Distiller MCP

Runtime not confirmedSecurity

Distills codebases into compact API context and generates prompts for documentation, refactoring, security, and other AI analyses.

Key Features:
Distills individual files and directories into compact code structure
Filters public APIs, types, imports, documentation, and implementation details
Generates prompts for security, refactoring, bugs, documentation, and performance
5 0 172
MCP Server logo

MCP Server

Runtime not confirmedSecurity

Query RAD Security for Kubernetes inventory, vulnerabilities, runtime data, findings, and workflow automation through MCP.

Key Features:
Kubernetes cluster, container, and resource inventory
Container image vulnerability and SBOM lookup
Runtime process trees, baselines, and process analysis
3 0 7
Intodns MCP Server logo

Intodns MCP Server

Runtime: npxSecurity

Scans DNS, email security, deliverability, web headers, and compliance posture through IntoDNS.ai over MCP.

Key Features:
IntoDNS.ai scans with scores, grades, issues, and recommendations
DNS, DNSSEC, propagation, WHOIS, and TLSA/DANE diagnostics
Email authentication and deliverability analysis
5 0 2
Dechonet MCP logo

Dechonet MCP

Runtime: npxSecurity

Audits domains through MCP with DNS, TLS, HTTP, email, network, registration, and subnet analysis tools.

Key Features:
DNS, DNSSEC, SPF, and DMARC diagnostics
TLS certificate and HTTP security grading
Email authentication and header analysis
6 0 1
4

4da MCP Server

Runtime not confirmedSecurity

Scans dependencies for vulnerabilities, evaluates upgrade safety and impact, and preserves project decisions and agent memory.

Key Features:
OSV.dev vulnerability scanning across supported lockfiles
Release, deprecation, yank, and freshness analysis
Project-aware upgrade impact and planning
0 0
Binary Ninja MCP logo

Binary Ninja MCP

Runtime not confirmedSecurity

Connects Binary Ninja to MCP clients for querying, decompiling, annotating, renaming, and retyping loaded binaries.

Key Features:
Function discovery, decompilation, IL, and disassembly
Function, variable, and data-label renaming
Address and function comment management
11 1 456
Qurl MCP logo

Qurl MCP

Runtime not confirmedSecurity

Creates and manages expiring qURL access links with policy controls, token rotation, session management, and one-time link delivery.

Key Features:
Policy-bound expiring qURL creation
IP, geo, user-agent, and AI-agent access filters
One-time use and session limits
1 0 4
A

Auth0 MCP Server

Runtime not confirmedSecurity

Manage Auth0 applications, APIs, Actions, logs, forms, and users through natural-language MCP tools.

Key Features:
Natural-language Auth0 tenant management
Application, API, Action, log, form, and user operations
OAuth 2.0 device authorization
3 0 122

Frequently Asked Questions: Depscope Alternatives

The top-rated alternatives to Depscope in the Security category include Agent Security Scanner MCP, Shodan, EchelonGraph CVE & Exposure. These servers offer complementary or alternative capabilities depending on your deployment stack and authentication requirements.

Depscope and its alternatives vary by runtime requirement (Node.js/npx, Python/uvx, Docker, or remote HTTP/SSE endpoints). Check the specification comparison table above to verify command requirements before installing.

It varies by server. Pricing, auth and license are declared by each maintainer and shown in the comparison table where provided β€” a dash means nothing was declared, so check that project's own site before assuming it's free.

Click the "Compare side-by-side β†’" button on any alternative card to see an in-depth comparison matrix covering feature lists, stars, npm downloads, install configurations, and schema specifications.