Dependency Vulnerability Tracker — package security advisories ($0.01/query)

Official registry Security

Dependency vulns & malicious-package advisories. Register in-session — free testnet funds.

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (streamable-http)
Claude Code
claude mcp add --transport http dependency-vulnerability-tracker-package 'https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http'
JSON configuration (Claude Desktop, Cursor, VS Code)
{
    "mcpServers": {
        "dependency-vulnerability-tracker-package": {
            "type": "http",
            "url": "https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http"
        }
    }
}

Frequently asked questions

What is Dependency Vulnerability Tracker — package security advisories ($0.01/query)?

Dependency vulns & malicious-package advisories. Register in-session — free testnet funds.

How do I install Dependency Vulnerability Tracker — package security advisories ($0.01/query)?

It runs as a remote server. In Claude Code: claude mcp add --transport http dependency-vulnerability-tracker-package 'https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does Dependency Vulnerability Tracker — package security advisories ($0.01/query) need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is Dependency Vulnerability Tracker — package security advisories ($0.01/query) open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains Dependency Vulnerability Tracker — package security advisories ($0.01/query)?

It is published by ee324. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.