Npm Mcp

Overview

Npm Mcp is a Model Context Protocol server that brings npm package management, security analysis, and compatibility checking directly into AI assistants. Any MCP-compatible AI can call its tools to inspect packages, assess vulnerabilities, and verify dependencies—letting your AI agent make informed decisions about npm packages during a conversation or workflow.

The server runs locally on your machine via the npm package @alisaitteke/npm-mcp, speaking MCP over stdio. It requires no credentials and works immediately after installation. Version v0.0.3 is available now under the MIT license, with full source code at alisaitteke/npm-mcp on GitHub.

Npm Mcp is categorized under Security on mcp.site and integrates with all major MCP clients including Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, and Zed. Maintainers are invited to claim this listing to verify ownership and keep information up to date.

Installation

// claude_desktop_config.json
{
  "mcpServers": {
    "npm_mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@alisaitteke/npm-mcp"
      ]
    }
  }
}