io.github.alisaitteke/npm-mcp

NPM MCP

Model Context Protocol server for npm registry

Search packages, check security, compare versions, and validate compatibility. Use it from Cursor AI or Claude Desktop.

Note: This is an unofficial, community-driven MCP server and is not affiliated with or endorsed by npm, Inc.

Features

• Auto-Security — AI automatically checks packages before suggesting install (no user action!)
• Capabilities Analysis — ESM/CJS, TypeScript, Platform support (Node/Browser/Deno), Build tools
• Quick Start Generator — Ready-to-use code examples for any package
• Package Comparison — Compare alternatives side-by-side (features, size, popularity)
• Bundle Size Analysis — Minified/gzipped sizes, tree-shaking, impact on your bundle
• Similar Packages — Find alternatives and similar packages
• Search — Find packages with ranking and scores
• Details — Versions, dependencies, download stats, deprecation status
• Security — Vulnerability check and safe version tips
• Compatibility — Peer dependency and version conflicts
• Quality — Maintenance and community metrics
• Version compare — Breaking changes and semver
• NPX check — Validate npx commands before running

Install & use

With npx (recommended)

No global install. Add to Cursor or Claude config:

Cursor — ~/.cursor/mcp.json:

{
  "mcpServers": {
    "npm-registry-mcp": {
      "command": "npx",
      "args": ["@alisaitteke/npm-mcp"]
    }
  }
}

Claude Desktop — ~/Library/Application Support/Claude/claude_desktop_config.json (macOS):

{
  "mcpServers": {
    "npm-registry-mcp": {
      "command": "npx",
      "args": ["@alisaitteke/npm-mcp"]
    }
  }
}

Global install (optional)

npm install -g @alisaitteke/npm-mcp

Then use "command": "npm-mcp" (no args) in the config above.

What you can ask

Once the server is connected, you can ask things like:

• “Search for React state management libraries”
• “Security audit for express@4.18”
• “Is lodash@4.17 compatible with my current deps?”
• “Compare React 17 and 18”
• “Quality check for date-fns”
• “Is it safe to run npx create-next-app?”

License

MIT

Contributors

Ali Sait Teke

Creator & Maintainer

Thanks to everyone who helps improve this project!