IndieStack

Dependency guardrail for AI coding agents. Validates packages before installation, catches hallucinations and typosquats, and provides compatibility intelligence across 6,500+ developer tools.

10,000+ PyPI installs | 110,000+ unique visitors | 23 MCP tools

claude mcp add indiestack -- uvx --from indiestack indiestack-mcp

Then ask your agent:

• "Validate this package before installing"
• "Find an auth solution for my Next.js app"
• "Check compatibility between these two tools"

What it does

Before your AI installs a dependency or writes boilerplate — IndieStack validates it exists, checks for typosquats, and searches 6,500+ curated developer tools with real compatibility data from 4,500+ repos. You get install commands, health scores, and what tools actually work together in production.

"Indie" is the curation filter: independent developers and small teams. Focused, lean, maintained, honest pricing.

Tech stack

• Backend: Python 3 / FastAPI / SQLite (FTS5 full-text search, WAL mode)
• Infrastructure: Fly.io / Docker / 48-endpoint smoke testing
• MCP server: Published on PyPI — 23 tools, 3 resources, 5 prompts
• Auth: GitHub OAuth via sessions
• Payments: Stripe subscriptions
• Monitoring: Event reactor, pattern detection, Telegram alerting

Install

Claude Code (zero install — runs via uvx):

claude mcp add indiestack -- uvx --from indiestack indiestack-mcp

Claude Desktop — add to claude_desktop_config.json:

{
  "mcpServers": {
    "indiestack": {
      "command": "uvx",
      "args": ["--from", "indiestack", "indiestack-mcp"]
    }
  }
}

Cursor / Windsurf — add to your MCP config:

{"command": "uvx", "args": ["--from", "indiestack", "indiestack-mcp"]}

Persistent install:

pipx install indiestack
claude mcp add indiestack -- indiestack-mcp

CLI (terminal use):

pip install indiestack

indiestack search "analytics"
indiestack details simple-analytics
indiestack stack "auth, payments, email"

Tools (23)

Resources

Prompts

What's new in v1.19

• Package validation — validate_package() verifies packages exist and are safe before installation. Catches hallucinated and typosquatted packages.
• Guardrail-first design — Built for AI agents that need to validate dependencies, not just discover them.

Recent highlights

• Migration intelligence — Tool details include real migration data from 4,500+ GitHub repos.
• 93,000+ verified package combinations from production repos.
• Trust-weighted search — Tools with higher agent success rates rank higher.
• Market gaps — get_market_gaps() exposes zero-result queries ranked by search volume.

Links

• indiestack.ai
• Explore Tools
• Submit Your Tool
• What is IndieStack?

MIT License