Package Intel MCP
Package intelligence for AI agents across npm, PyPI, crates.io and deps.dev. No API keys.
Install
Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).
claude mcp add --transport http package-intel-mcp 'https://package.datakoot.com/mcp'
{
"mcpServers": {
"package-intel-mcp": {
"type": "http",
"url": "https://package.datakoot.com/mcp"
}
}
}
Documentation
From the project's README on GitHub, refreshed weekly. Links open on GitHub.
Contents
Package Intel MCP — by Datakoot
Software supply-chain intelligence for AI agents — as MCP tools your agent can call mid-task, so it can vet a dependency before it installs it. Covers npm, PyPI and crates.io. No API keys.
Tools
| Tool | What it does | Source |
|---|---|---|
package_info | Metadata for a package: description, latest version, license, homepage & repo links | npm / PyPI / crates.io |
package_versions | Full version history with release dates | npm / PyPI / crates.io |
package_downloads | Download counts and popularity signal | npm / PyPI / crates.io |
package_dependencies | Direct dependencies for a given version | deps.dev |
package_health | Health signals: OpenSSF Scorecard, stars, dependents | deps.dev |
package_search | Search for packages by keyword | npm / PyPI / crates.io |
Every tool accepts an ecosystem of npm, pypi, or crates. No API keys required.
Quick start
claude mcp add --transport http package-intel https://package.datakoot.com/mcp
Or point any MCP client at https://package.datakoot.com/mcp.
Try it in 10 seconds — no key, no signup
Paste this into a terminal:
curl -s https://package.datakoot.com/mcp \
-H 'content-type: application/json' \
-H 'accept: application/json, text/event-stream' \
-d '{"jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": {"name": "package_health", "arguments": {"ecosystem": "npm", "name": "express"}}}'
You get a supply-chain health snapshot for the npm package express — versions, downloads, dependencies, maintenance signals — no API key, nothing to sign up for.
Or point any MCP client at the URL and just ask your agent, in plain language:
- "How healthy is the npm package
express?" - "Before I add
left-pad, is it actively maintained and widely used?"
Data & attribution
Data comes from the public registry APIs for npm, PyPI and crates.io, plus deps.dev (Google Open Source Insights, CC-BY 4.0) for dependency graphs and OpenSSF Scorecard health signals. Package data is served from official public APIs and is informational.
Part of Datakoot — keyless intelligence APIs for AI agents.
Frequently asked questions
What is Package Intel MCP?
Package intelligence for AI agents across npm, PyPI, crates.io and deps.dev. No API keys.
How do I install Package Intel MCP?
It runs as a remote server. In Claude Code: claude mcp add --transport http package-intel-mcp 'https://package.datakoot.com/mcp'. For other clients, paste the JSON configuration from this page into their MCP settings.
Does Package Intel MCP need an API key?
Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.
Is Package Intel MCP open source?
Yes. Its code is on GitHub under the MIT license.
Who maintains Package Intel MCP?
It is published by datakoot. AI.tn lists it but does not maintain or endorse it.
From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.