Package Registry MCP

Package Registry MCP Server

A Model Context Protocol (MCP) server that enables AI assistants and agents (Claude, Cursor, Copilot, etc.) to search package registries and retrieve up-to-date package information.

Getting Started

Cursor

Alternatively, in Cursor, you can configure MCP servers in your settings:

1. Open Cursor Settings (Cmd/Ctrl + ,)
2. Search for "MCP" or go to Extensions > MCP
3. Add a new server with:
   • Name: package-registry
   • Command: npx
   • Args: ["package-registry-mcp"]

Claude Code

For Claude Code, run the following command in your terminal:

claude mcp add -s user package-registry npx package-registry-mcp

After configuration, you'll have access to package search and information tools.

Claude Desktop

Add this server to your Claude Desktop by adding the following to your claude_desktop_config.json:

{
  "mcpServers": {
    "package-registry": {
      "command": "npx",
      "args": ["package-registry-mcp"]
    }
  }
}

The config file is typically located at:

• macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
• Windows: %APPDATA%\Claude\claude_desktop_config.json

After adding the configuration, restart Claude Desktop.

Features

• Search NPM packages
• Get detailed NPM package information
• Search crates.io (Rust package registry)
• Get detailed crate information
• Search NuGet packages (.NET package registry)
• Get detailed NuGet package information
• Get detailed PyPI package information (Python package registry)
• Get detailed Go module information (Go package registry)
• Search GitHub Security Advisories for vulnerabilities
• Real-time data directly from package registries

Available Tools

NPM Tools

search-npm-packages

Search the NPM registry for packages matching a query.

Parameters:

• query (string): Search term for packages
• limit (number, optional): Maximum number of results (1-100, default: 10)

Example:

bun tool search-npm-packages '{"query": "react", "limit": 5}'

get-npm-package-details

Get detailed information about a specific NPM package.

Parameters:

• name (string): Exact crate name

Example:

bun tool get-npm-package-details '{"name": "react"}'

Returns detailed information including:

• Package metadata (name, description, version, license)
• Dependencies (runtime, dev, peer)
• Maintainer information
• Repository and homepage links
• Last 50 versions (newest first)

list-npm-package-versions

List all versions of a specific NPM package.

Parameters:

• name (string): Exact crate name
• limit (number, optional): Maximum number of versions to return (1-1000, default: 100)

Example:

bun tool list-npm-package-versions '{"name": "react", "limit": 50}'

Returns:

• Package name and total version count
• All versions sorted by release date (newest first)
• Latest version information

crates.io Tools

search-cargo-packages

Search crates.io for Rust crates matching a query.

Parameters:

• query (string): Search term for crates
• limit (number, optional): Maximum number of results (1-100, default: 10)

Example:

bun tool search-cargo-packages '{"query": "serde", "limit": 5}'

get-cargo-package-details

Get detailed information about a specific crate from crates.io.

Parameters:

• name (string): Exact crate name

Example:

bun tool get-cargo-package-details '{"name": "serde"}'

Returns detailed information including:

• Crate metadata (name, description, version, license)
• Keywords and categories
• Download statistics (total and recent)
• Features and crate size
• Repository, homepage, and documentation links
• Last 50 versions (newest first)

list-cargo-package-versions

List all versions of a specific crate from crates.io.

Parameters:

• name (string): Exact crate name
• limit (number, optional): Maximum number of versions to return (1-1000, default: 100)

Example:

bun tool list-cargo-package-versions '{"name": "serde", "limit": 50}'

Returns:

• Crate name and total version count
• All versions sorted by release date (newest first)
• Latest and max stable version information

NuGet Tools

search-nuget-packages

Search the NuGet registry for .NET packages matching a query.

Parameters:

• query (string): Search term for packages
• limit (number, optional): Maximum number of results (1-100, default: 10)

Example:

bun tool search-nuget-packages '{"query": "newtonsoft", "limit": 5}'

get-nuget-package-details

Get detailed information about a specific NuGet package.

Parameters:

• name (string): Exact package name

Example:

bun tool get-nuget-package-details '{"name": "Newtonsoft.Json"}'

Returns detailed information including:

• Package metadata (name, description, version, license)
• Authors and project information
• Target frameworks and dependencies
• Download statistics and verification status
• Project, license, and icon URLs
• Last 50 versions (newest first)

list-nuget-package-versions

List all versions of a specific NuGet package.

Parameters:

• name (string): Exact package name
• limit (number, optional): Maximum number of versions to return (1-1000, default: 100)

Example:

bun tool list-nuget-package-versions '{"name": "Newtonsoft.Json", "limit": 50}'

Returns:

• Package name and total version count
• All versions sorted by release date (newest first)
• Latest version information

PyPI Tools

Note: PyPI does not provide a JSON search API, so only package details and version listing are supported. For searching, please use the PyPI website directly at https://pypi.org/search/.

get-pypi-package-details

Get detailed information about a specific PyPI package.

Parameters:

• name (string): Exact package name

Example:

bun tool get-pypi-package-details '{"name": "requests"}'

Returns detailed information including:

• Package metadata (name, description, version, license)
• Author and maintainer information
• Dependencies and Python version requirements
• Classifiers and keywords
• Project URLs and documentation links
• Download statistics
• Vulnerability information
• Last 50 versions (newest first)

list-pypi-package-versions

List all versions of a specific PyPI package.

Parameters:

• name (string): Exact package name
• limit (number, optional): Maximum number of versions to return (1-1000, default: 100)

Example:

bun tool list-pypi-package-versions '{"name": "django", "limit": 50}'

Returns:

• Package name and total version count
• All versions sorted by release date (newest first)
• Latest version information

Go Tools

Note: pkg.go.dev does not provide a JSON search API, so only package details and version listing are supported. For searching, please use the pkg.go.dev website directly at https://pkg.go.dev/search/.

get-golang-package-details

Get detailed information about a specific Go module/package.

Parameters:

• module (string): Exact module path (e.g., "github.com/gin-gonic/gin")

Example:

bun tool get-golang-package-details '{"module": "github.com/gin-gonic/gin"}'

Returns detailed information including:

• Module path and latest version
• Publication date and repository information
• VCS (version control system) details
• pkg.go.dev and go get command links
• Last 50 versions (newest first)

list-golang-package-versions

List all versions of a specific Go module/package.

Parameters:

• module (string): Exact module path
• limit (number, optional): Maximum number of versions to return (1-1000, default: 100)

Example:

bun tool list-golang-package-versions '{"module": "github.com/gorilla/mux", "limit": 50}'

Returns:

• Module path and total version count
• All versions sorted by release date (newest first)
• Latest version information

GitHub Security Advisory Tools

search-github-advisories

Search the GitHub Security Advisory Database for vulnerabilities.

Parameters:

• ecosystem (string, optional): Filter by package ecosystem (npm, pip, maven, nuget, go, rust, rubygems, composer, pub, swift, erlang, actions, other)
• severity (string, optional): Filter by severity level (unknown, low, medium, high, critical)
• type (string, optional): Filter by advisory type (reviewed, malware, unreviewed)
• cveId (string, optional): Filter by CVE identifier
• limit (number, optional): Maximum number of results (1-100, default: 30)

Example:

bun tool search-github-advisories '{"ecosystem": "npm", "severity": "critical", "limit": 5}'

get-github-advisory

Get detailed information about a specific GitHub Security Advisory.

Parameters:

• ghsaId (string): The GHSA identifier (e.g., GHSA-grv7-fg5c-xmjg)

Example:

bun tool get-github-advisory '{"ghsaId": "GHSA-grv7-fg5c-xmjg"}'

Returns detailed information including:

• Advisory metadata (GHSA ID, CVE ID, summary, description)
• Severity and CVSS score
• Affected packages and vulnerable version ranges
• Patched versions
• CWE classifications
• References and credits

get-package-advisories

Get all security advisories affecting a specific package.

Parameters:

• ecosystem (string): The package ecosystem (npm, pip, maven, etc.)
• packageName (string): The package name (e.g., braces, lodash)
• severity (string, optional): Filter by severity level
• limit (number, optional): Maximum number of results (1-100, default: 30)

Example:

bun tool get-package-advisories '{"ecosystem": "npm", "packageName": "braces"}'

Returns:

• All known security advisories for the specified package
• Vulnerable version ranges and patched versions
• Severity ratings and CVSS scores

Installation

Install the package globally:

npm install -g package-registry-mcp

Or use directly with npx (no installation required):

npx package-registry-mcp

Contributing

See CONTRIBUTING.md for development setup and guidelines.

Requirements

• Node.js 18+ or Bun runtime
• Internet connection for package registry access

License

See LICENSE file for details.