What is the main functional difference between NPMScan and Shadcn Ui MCP Server?

NPMScan is categorized under Developer Tools and uses an install path we have not confirmed yet. Shadcn Ui MCP Server belongs to Developer Tools and uses a local stdio subprocess. Pick NPMScan for developer tools work and Shadcn Ui MCP Server for developer tools.

How do I install NPMScan or Shadcn Ui MCP Server in Claude Desktop, Cursor, or Windsurf?

Copy the mcpServers block from the config section on this page into your client's config (for example claude_desktop_config.json or ~/.cursor/mcp.json), then fully restart the client. NPMScan has no confirmed install command yet — follow its own setup instructions.

Are NPMScan and Shadcn Ui MCP Server free to use, or do they require API keys?

NPMScan is listed as free. Auth: no auth required. Shadcn Ui MCP Server is listed as free. Auth: api key required. If a server needs environment variables such as API keys, define them under the env key in your client's MCP config.

Can I run both NPMScan and Shadcn Ui MCP Server at the same time in my AI client?

Yes. MCP clients support multiple servers: add npmscan-2 and jpisnice-shadcn-ui-mcp-server as separate keys in the same mcpServers object, and your assistant will call tools from either one.

Which MCP server has higher directory engagement and quality ratings?

On AllMCPs, NPMScan has a quality signal of 48/100 (Fair) with 0 views, 0 installs and 0 GitHub stars. Shadcn Ui MCP Server has 72/100 (Great) with 3 views, 0 installs and 3,041 GitHub stars.

NPMScan vs Shadcn Ui MCP Server — MCP Server Comparison

NPMScan vs Shadcn Ui MCP Server — MCP Server Comparison | AllMCPs

Feature & specification comparison

Rows where the two servers differ are marked.

Spec	N NPMScan	Shadcn Ui MCP Server
Category	Developer Tools	Developer Tools
Quality signal	48/100 · Fair	72/100 · Great
Install command	Not confirmed yet	Confirmed
Transport	—	Local subprocess (stdio)
Auth	No auth required	API key required
Pricing	Free	Free
Required env vars	None listed	`MCP_TRANSPORT_MODEMCP_PORTMCP_HOSTMCP_CORS_ORIGINSGITHUB_PERSONAL_ACCESS_TOKENUI_LIBRARY`
Verified owner	Community listing	Community listing
GitHub stars	0	3,041
Directory activity	0 views 0 installs 0 upvotes	3 views 0 installs 0 upvotes
Tools	23	10
Full listing	View NPMScan	View Shadcn Ui MCP Server

Tools & capabilities

NPMScan tools 23

search_packagesSearch the npm registry by name or keywords. Each result includes weekly/monthly download counts, dependent-package counts, and rank among npmscan's own top-100k-by-downloads snapshot, so you can tell an established package from an abandoned or squatted one that merely matches the query text — flag…
get_packageLatest version, install scripts (`preinstall`/`install`/`postinstall`/`prepare`), maintainers, license, recent version history, weekly downloads, GitHub stars, TypeScript support, days since last publish, ecosystem-wide download rank, a 3-month download trend, and an `isLatestVersionVulnerable`/`hi…
get_package_versionMetadata for one exact version plus an OSV.dev check scoped to that version — `isVulnerable`/`highestSeverity` as a direct safe/not-safe answer, with each finding's severity, summary, fixed version and `isMalware`. For checking a version pinned in a lockfile. A version npm has removed but OSV still…
get_maintainer_profilePackages an npm username currently maintains via npm's own `maintainer:<username>` search index, plus precomputed download/dependent totals across all of them. Lists the most-downloaded `limit` packages (default 50, max 250); totals still cover every package found. A plain info lookup, not a securi…
query_vulnerabilitiesOSV.dev lookup for known vulnerabilities affecting a package, optionally scoped to a version, with `isVulnerable`/`highestSeverity` as a direct verdict and each finding's severity, summary, fixed version and `isMalware`. For npm it also cross-checks the name/version against the registry: a name or…
batch_query_vulnerabilitiesOSV.dev lookup across a whole dependency inventory at once — pass a flat `packages` list, or paste raw `package.json`/lockfile/CycloneDX JSON/SPDX JSON content via `content` and it parses that for you. Chunks large inventories internally, with severity, summary, CVE aliases, fixed version and `isMa…
get_latest_advisoriesRecently published npm advisories from one of three sources (one per call): `type: "reviewed"` (default) is GitHub's curated, mostly CVE-backed set, filterable by severity, vulnerability category, affected package name, or an exact GHSA/CVE ID; `type: "malware"` is GitHub's own malicious-package ad…
get_cveNIST NVD lookup for one exact CVE ID (authoritative CVSS score/vector, CWEs, references), or a keyword/severity/CWE/date-range search. Enriched with CISA KEV status (actively exploited in the wild?) and FIRST.org EPSS (30-day exploitation probability). Falls back to the raw MITRE CVE record when NV…
analyze_install_scriptFetches a package's published tarball and statically scans its `preinstall`/`install`/`postinstall`/`prepare` lifecycle scripts — and the files they reference, pulled from the tarball itself — against npmscan's red-flags rubric (`child_process` use, network calls, sensitive-path/env access, obfusca…
analyze_transitive_dependenciesRecursively resolves 1-15 direct/root packages' dependency graphs to a configurable depth (default 2, max 3) and batch-checks every resolved package against OSV.dev — surfaces vulnerabilities buried several levels deep that a flat `batch_query_vulnerabilities` call would miss, with `vulnerablePaths…
check_package_provenanceChecks a version's npm/Sigstore publish provenance against reality: flags a non-GitHub-hosted builder or an attested source repo that doesn't match `package.json`'s own `repository` field; flags a package missing provenance while its npm-scope/maintainer peers consistently have it (skipped for vers…
check_maintainer_changesReconstructs a package's maintainer-add/remove history from the npm packument and flags account-takeover patterns — a new maintainer who published shortly after being added, a sudden full maintainer-list replacement, a long-standing maintainer quietly dropped, or a maintainer change not yet tied to…
+11 more on the listing page

Shadcn Ui MCP Server tools 10

get_componentGet the source code for a specific shadcn/ui v4 component
get_component_demoGet demo code illustrating how a shadcn/ui v4 component should be used
list_componentsGet all available shadcn/ui v4 components
get_component_metadataGet metadata for a specific shadcn/ui v4 component
get_directory_structureGet the directory structure of the shadcn-ui v4 repository
get_blockGet source code for a specific shadcn/ui v4 block (e.g., calendar-01, dashboard-01)
list_blocksGet all available shadcn/ui v4 blocks with categorization
apply_themeApply a TweakCN theme preset to the project
list_themesList available tweakcn themes
get_themeGet details of a specific tweakcn theme

Ready-to-paste client configs

Paste either block (or both) into your client config, e.g. claude_desktop_config.json or ~/.cursor/mcp.json. We only show a config when the install command is confirmed.

NPMScan

No confirmed install command for NPMScan yet — follow the setup steps linked from its listing page rather than a guessed package name.

Shadcn Ui MCP Server

mcpServers (Claude Desktop / Cursor)

{
  "mcpServers": {
    "jpisnice-shadcn-ui-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@jpisnice/shadcn-ui-mcp-server"
      ],
      "env": {
        "MCP_TRANSPORT_MODE": "YOUR_MCP_TRANSPORT_MODE_HERE",
        "MCP_PORT": "YOUR_MCP_PORT_HERE",
        "MCP_HOST": "YOUR_MCP_HOST_HERE",
        "MCP_CORS_ORIGINS": "YOUR_MCP_CORS_ORIGINS_HERE",
        "GITHUB_PERSONAL_ACCESS_TOKEN": "YOUR_GITHUB_PERSONAL_ACCESS_TOKEN_HERE",
        "UI_LIBRARY": "YOUR_UI_LIBRARY_HERE"
      }
    }
  }
}

NPMScan vs Shadcn Ui MCP Server

Which MCP server should you choose?

N
Choose NPMScan when

Choose Shadcn Ui MCP Server when

Feature & specification comparison

Tools & capabilities

NPMScan tools 23

Shadcn Ui MCP Server tools 10

Ready-to-paste client configs

NPMScan

Shadcn Ui MCP Server

Frequently asked questions

NChoose NPMScan when

Choose Shadcn Ui MCP Server when

NPMScan tools 23

Shadcn Ui MCP Server tools 10

NPMScan

Shadcn Ui MCP Server

Frequently asked questions

What is the main functional difference between NPMScan and Shadcn Ui MCP Server?

How do I install NPMScan or Shadcn Ui MCP Server in Claude Desktop, Cursor, or Windsurf?

Are NPMScan and Shadcn Ui MCP Server free to use, or do they require API keys?

Can I run both NPMScan and Shadcn Ui MCP Server at the same time in my AI client?

Which MCP server has higher directory engagement and quality ratings?

Popular comparisons with NPMScan

Popular comparisons with Shadcn Ui MCP Server

N
Choose NPMScan when