Log inSubmit server
MCP Server Npm Plus logo

MCP Server Npm Plus

by ofershap

Researches npm packages through search, metadata, download statistics, bundle sizes, vulnerabilities, and dependency trees.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install MCP Server Npm Plus

Pick your client, then add it in one click or paste the config.

STDIONode.js
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "ofershap-mcp-server-npm-plus": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-server-npm-plus"
      ]
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

Automated check passed— started and listed 8 tools correctly (9d ago).

Overview

ofershap/mcp-server-npm-plus MCP server gives AI assistants access to public npm package research through MCP tools. It searches packages, retrieves metadata and dependency trees, checks download activity, compares packages, measures minified and gzip bundle sizes through Bundlephobia, and returns vulnerability advisories. Run it with npx; no API keys are required. Reach for it when evaluating npm dependencies inside a supported MCP client.

Use cases

  • Search npm for packages matching a development requirement
  • Compare download counts across candidate dependencies
  • Check bundle sizes before adding a package
  • Review vulnerability information and advisory links
  • Inspect direct dependencies and download trends

Key features

  • npm package search
  • Package metadata and dependency details
  • Download statistics and comparisons
  • Bundle size checks through Bundlephobia
  • Vulnerability information with advisory links
  • Direct dependency trees and daily trends

Tools8

What MCP Server Npm Plus lets your agent do. Expand a tool for its parameters.

Verified live~691 tokens of context

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked 1d ago

Recent health check succeeded.

21/22 checks healthy over the last 91d

What it can do

From the 8 tools this server returned when we ran it.

Makes network requests · 3Read-only tools · 8
Network at startup3 connections
Files written at startupNone
Install scriptsprepare
npm provenanceNot published
Package age252 days
Maintainers1

Observed 2026-10-31 in an isolated sandbox. A description of reach, not a security audit.

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 3d ago via OSV.dev · mcp-server-npm-plus (npm)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars1Stargazers on the source repository.
npm downloads179Package downloads in the last 30 days.
Last commit8mo agoMost recent push to the default branch.
Availability100%Our rolling endpoint + install checks that succeeded.
Install checkPassedOur sandbox started it and listed its tools.
Tools exposed8Callable tools this server registers over MCP.

How MCP Server Npm Plus works

What ofershap/mcp-server-npm-plus MCP server does

ofershap/mcp-server-npm-plus MCP server connects an MCP-compatible AI assistant to public npm registry APIs and Bundlephobia. It brings common package evaluation tasks into the assistant rather than requiring separate searches across npm, download-statistics pages, bundle-size services, and vulnerability sources.

The server supports package discovery and comparison. You can search npm by query, inspect a package’s description, license, repository, and dependencies, or compare download counts for multiple packages. It also exposes package-level download statistics and daily download trends with a sparkline.

Tools and capabilities

Available MCP tools include:

  • search for finding npm packages by query.
  • package_info for package descriptions, licenses, repositories, and dependencies.
  • downloads for download statistics for one package.
  • compare_downloads for comparing counts across multiple packages.
  • bundle_size for minified and gzip sizes through Bundlephobia.
  • vulnerabilities for vulnerability information and advisory links.
  • dependency_tree for displaying direct dependencies as a tree.
  • download_trends for daily download data with a sparkline.

These tools support questions such as finding React state-management packages, checking lodash’s bundle size, comparing zustand with jotai and valtio, or reviewing known issues in express.

Setup and configuration

Install and launch ofershap/mcp-server-npm-plus MCP server with npx:

Terminal
npx mcp-server-npm-plus

For Cursor, add a server entry to .cursor/mcp.json with npx as the command and mcp-server-npm-plus as its argument. Claude Desktop uses the same command and argument in claude_desktop_config.json. In VS Code, configure the command through an MCP extension.

No API keys or sign-up are required according to the project documentation. The server uses public npm APIs, with Bundlephobia used for bundle-size results.

Limitations and notes

The documented data sources are public npm APIs and Bundlephobia, so the server is intended for package research based on the information those services provide. The dependency-tree capability is described as showing direct dependencies, not a complete transitive dependency graph.

The repository identifies the project as MIT licensed and provides development commands for installing dependencies, type-checking, building, testing, linting, and formatting. Those commands are relevant for contributors; normal use is shown through the npx launch command.

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about MCP Server Npm Plus

ofershap/mcp-server-npm-plus is an MCP server that connects AI assistants to public npm registry APIs and Bundlephobia, with tools for package search, package details, downloads, bundle sizes, vulnerabilities, dependency trees, and download trends. It needs no API keys and runs through the MCP interface.

Run `npx mcp-server-npm-plus` to launch it. You can also add `npx` as the command and `mcp-server-npm-plus` as its argument in Cursor’s `.cursor/mcp.json`, Claude Desktop’s configuration, or an MCP extension in VS Code.

Yes, it works with Cursor. Add an `npm-plus` server entry to `.cursor/mcp.json` using `npx` as the command and `mcp-server-npm-plus` as the argument.

Yes, it provides vulnerability information and advisory links through the `vulnerabilities` tool. The documentation does not identify a separate API key requirement.

Related MCP servers

All in Security All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewMCP Server Npm Plus AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/ofershap-mcp-server-npm-plus?style=directory)](https://allmcps.com/mcp/ofershap-mcp-server-npm-plus)
HTML Embed
<a href="https://allmcps.com/mcp/ofershap-mcp-server-npm-plus"><img src="https://allmcps.com/api/badge/ofershap-mcp-server-npm-plus?style=directory" alt="MCP Server Npm Plus on AllMCPs" /></a>