MCPs › Security › npmscan

npmscan● live

Q: How do I install npmscan in Claude Code?

Run: claude mcp add --transport http npmscan https://npmscan--shyngys-shynbolatov.run.tools

Security analysis for npm packages, built for AI agents and developer tools. NPMScan helps agents inspect npm packages before installation by checking for: - Suspicious install scripts - Obfuscated or potentially malicious code - Credential and environment-variable access - Network and data-exfiltration indicators - Known vulnerabilities - Maintainer and ownership changes - Risky package updates and version differences Use this MCP server to investigate package risk, compare versions, and make safer dependency decisions directly from an MCP-compatible client. No account or API key is required. Website: https://npmscan.com

listed on

Smithery

Not monetized yet

Turn npmscan’s tool calls into revenue: one disclosed sponsored slot, 70% revenue share, fail-open by design.

Add monetization →

Install npmscan

For anyone using npmscan — no Lulu account needed

claude mcp add --transport http npmscan https://npmscan--shyngys-shynbolatov.run.tools

weather-mcp — free forecasts, rendered as native cards

Real-time weather for any city, built on the lulu-ads widget gallery. First-party, free forever.

View server →

FAQ

How do I install npmscan in Claude Code?

Run: claude mcp add --transport http npmscan https://npmscan--shyngys-shynbolatov.run.tools

Can I add npmscan as a connector in ChatGPT or Claude.ai?

Yes — it’s a remote MCP server, so no local install is needed.
ChatGPT: Settings → Connectors → Advanced → Developer mode → Add connector, then paste https://npmscan--shyngys-shynbolatov.run.tools.
Claude.ai: Settings → Connectors → Add custom connector, then paste the same URL.

Which registries list npmscan?

smithery

What is npmscan's trust score?

Unrated out of 100, computed from cross-registry traction signals (installs, stars, registry presence) — never influenced by sponsorship.

Similar servers

MMulti-Carrier Shipping API — powered by Secureship25Secureship MCP gives AI assistants access to a multi-carrier shipping API covering rate comparison, label generation, package tracking, pickup scheduling, address book management, shipment history, customs documents, and more — across carriers like UPS, FedEx, Purolator, Canpar, and others. Browse 150+ live endpoint schemas, parameters, and auth details — always current, never stale. Secureship isn't just for shipping with one carrier — it's a multi-carrier shipping platform, and this MCP server gives AI assistants full access to the API documentation for every supported action: compare rates across carriers, generate shipping labels, track packages, schedule pickups, manage address books, review shipment history, produce customs documents, handle invoices, and even perform actions available on the Secureship web dashboard — all through a single API. The MCP documentation server exposes live endpoint metadata pulled directly from the running application — not static docs that go stale. That means AI assistants always get the correct paths, parameters, request bodies, response schemas, and authentication requirements for 150+ endpoints. Read-only, public, no API key needed to browse. Authentication for the actual shipping API uses a simple X-API-KEY header. **Tools exposed:** - SearchDocs — keyword search across all API endpoints - GetEndpointDetail — full schema for a specific endpoint (params, request body, responses, auth) - ListEndpoints — list all endpoints, optionally filtered by category - GetAuthInfo — authentication instructions (X-API-KEY header) **Categories:** Shipping, logistics, e-commerce, carriers, rates, labels, tracking, address book, customs documents, shipment history