NPMScan

io.github.salemalem/npmscan

Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups

View repository →Homepage →

Connect this server

Add this to your MCP client config — claude_desktop_config.json (Claude Desktop) or .cursor/mcp.json (Cursor).Suits: Cursor · HTTP clients.

{
  "mcpServers": {
    "npmscan": {
      "url": "https://npmscan.com/api/mcp"
    }
  }
}

A starting point — check the repository for exact arguments and setup. Restart your client after editing the config.

Category
Developer Tools
Version
3.1.2
Registry
active
Published
10/10/2026

Remotes

  • streamable-httphttps://npmscan.com/api/mcp

More Developer Tools servers

Browse all Developer Tools →

SaleMate

SaleMateApp

Make product videos, UGC ads, scripts, voice-overs and photos with your SaleMate credits.

Developer ToolsAdded 1 week ago

io.github.SalesforgeAI/forge-mcp

SalesforgeAI

MCP server for Salesforge, Primeforge, Leadsforge, Infraforge, Warmforge, and Mailforge

Developer ToolsAdded 6 months ago

Maven Decoder

salitaba

Lets AI agents read the real source of any Maven dependency, decompiled from ~/.m2 or Central.

Developer ToolsAdded 2 months ago

io.github.saloprj/publicaml

saloprj

Free crypto AML/KYT screening for BTC/ETH/BSC/TRON — risk score, sanctions, source of funds.

Developer ToolsAdded 2 months ago

io.github.salrad22/code-sentinel

salrad22

Code quality analysis MCP server - detects security issues, deceptive patterns, and placeholders

Developer ToolsAdded 10 months ago

io.github.salted-butter-joshua/dify-mcp

salted-butter-joshua

MCP server exposing Dify knowledge base retrieval to Cursor and other MCP clients

Developer ToolsAdded 4 months ago

Add the badge to your site

Show visitors that NPMScan is listed here — it’s also the link we check for a free listing.

NPMScan — listed on Serverdex

HTML — for your website

<a href="https://serverdex.io/server/io-github-salemalem-npmscan?utm_source=badge"><img src="https://serverdex.io/brand/badge.svg" alt="NPMScan — listed on Serverdex" width="123" height="40" loading="lazy"></a>

Recommended. A dofollow link from your own domain is the one that counts for search engines, and it's the link we check for a free listing.

Markdown — for your README

[![NPMScan — listed on Serverdex](https://serverdex.io/brand/badge.svg)](https://serverdex.io/server/io-github-salemalem-npmscan?utm_source=badge)

Nice for visibility, but GitHub marks README links nofollow, so it doesn't pass authority. Use the HTML badge on your site as well.