What is io.github.alisaitteke/npm-mcp?

MCP server for npm package management, security analysis, and compatibility checking

How do I install io.github.alisaitteke/npm-mcp?

Clone io.github.alisaitteke/npm-mcp from https://github.com/alisaitteke/npm-mcp and configure it as an MCP server in your client (Claude Desktop, Cursor, or VS Code).

Is io.github.alisaitteke/npm-mcp open source?

Yes, io.github.alisaitteke/npm-mcp is open source under the MIT license. Source code is available at https://github.com/alisaitteke/npm-mcp.

What category does io.github.alisaitteke/npm-mcp belong to?

io.github.alisaitteke/npm-mcp is listed under Security & Auth MCP servers on MCPFind.

io.github.alisaitteke/npm-mcp — MCP Server for Security & Auth

NPM MCP

Model Context Protocol server for npm registry

Search packages, check security, compare versions, and validate compatibility. Use it from Cursor AI or Claude Desktop.

Note: This is an unofficial, community-driven MCP server and is not affiliated with or endorsed by npm, Inc.

Features

Auto-Security — AI automatically checks packages before suggesting install (no user action!)
Capabilities Analysis — ESM/CJS, TypeScript, Platform support (Node/Browser/Deno), Build tools
Quick Start Generator — Ready-to-use code examples for any package
Package Comparison — Compare alternatives side-by-side (features, size, popularity)
Bundle Size Analysis — Minified/gzipped sizes, tree-shaking, impact on your bundle
Similar Packages — Find alternatives and similar packages
Search — Find packages with ranking and scores
Details — Versions, dependencies, download stats, deprecation status
Security — Vulnerability check and safe version tips
Compatibility — Peer dependency and version conflicts
Quality — Maintenance and community metrics
Version compare — Breaking changes and semver
NPX check — Validate npx commands before running

Install & use

With npx (recommended)

No global install. Add to Cursor or Claude config:

Cursor — ~/.cursor/mcp.json:

{
  "mcpServers": {
    "npm-registry-mcp": {
      "command": "npx",
      "args": ["@alisaitteke/npm-mcp"]
    }
  }
}

Claude Desktop — ~/Library/Application Support/Claude/claude_desktop_config.json (macOS):

{
  "mcpServers": {
    "npm-registry-mcp": {
      "command": "npx",
      "args": ["@alisaitteke/npm-mcp"]
    }
  }
}

Global install (optional)

npm install -g @alisaitteke/npm-mcp

Then use "command": "npm-mcp" (no args) in the config above.

What you can ask

Once the server is connected, you can ask things like:

“Search for React state management libraries”
“Security audit for express@4.18”
“Is lodash@4.17 compatible with my current deps?”
“Compare React 17 and 18”
“Quality check for date-fns”
“Is it safe to run npx create-next-app?”

License

MIT

Contributors

    <sub><b>Ali Sait Teke</b></sub>
  </a>

  <sub>Creator & Maintainer</sub>
</td>

Thanks to everyone who helps improve this project!

Set up in your AI client

AI clientOperating system

Merge this template into ~/Library/Application Support/Claude/claude_desktop_config.json. Keep existing servers. Add any arguments, credentials, and permissions required by the maintainer; this template has not been install-tested.

json

{
  "mcpServers": {
    "io-github-alisaitteke-npm-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@alisaitteke/npm-mcp"
      ]
    }
  }
}

Restart Claude Desktop completely for changes to take effect. Confirm the server appears connected in the client’s tool list, then try a read-only example from its documentation.

Claude Desktop setup reference

Compatible MCP Clients

io.github.alisaitteke/npm-mcp works with any MCP-compatible client. Copy the config snippet from the Configuration section above and add it to the file shown for your client, then restart the application.

Claude Desktop~/Library/Application Support/Claude/claude_desktop_config.jsonRestart Claude Desktop completely for changes to take effect.

Cursor~/.cursor/mcp.jsonRestart Cursor for changes to take effect.

VS Code.vscode/mcp.jsonReload VS Code window for changes to take effect.

Windsurf~/.codeium/windsurf/mcp_config.jsonRestart Windsurf for changes to take effect.

Claude Code.mcp.jsonSave at the project root, then start Claude Code in that project and review the MCP server approval prompt. Keep real credentials out of shared files.

io.github.alisaitteke/npm-mcp