English Français العربية

io.github.alisaitteke/npm-mcp

Official registry Developer tools

MCP server for npm package management, security analysis, and compatibility checking

Source code Documentation

What can you do with io.github.alisaitteke/npm-mcp?

  • Auto-Security — AI automatically checks packages before suggesting install (no user action!)
  • Capabilities Analysis — ESM/CJS, TypeScript, Platform support (Node/Browser/Deno), Build tools
  • Quick Start Generator — Ready-to-use code examples for any package
  • Package Comparison — Compare alternatives side-by-side (features, size, popularity)
  • Bundle Size Analysis — Minified/gzipped sizes, tree-shaking, impact on your bundle
  • Similar Packages — Find alternatives and similar packages
  • Search — Find packages with ranking and scores
  • Details — Versions, dependencies, download stats, deprecation status

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package @alisaitteke/npm-mcp
Claude Code 
claude mcp add npm-mcp -- npx -y @alisaitteke/npm-mcp@0.0.3
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "npm-mcp": {
            "command": "npx",
            "args": [
                "-y",
                "@alisaitteke/npm-mcp@0.0.3"
            ]
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. NPM MCP
  2. Features
  3. Install & use
  4. What you can ask
  5. License
  6. Contributors

NPM MCP

Model Context Protocol server for npm registry

Search packages, check security, compare versions, and validate compatibility. Use it from Cursor AI or Claude Desktop.

Note: This is an unofficial, community-driven MCP server and is not affiliated with or endorsed by npm, Inc.

Features

  • Auto-Security — AI automatically checks packages before suggesting install (no user action!)
  • Capabilities Analysis — ESM/CJS, TypeScript, Platform support (Node/Browser/Deno), Build tools
  • Quick Start Generator — Ready-to-use code examples for any package
  • Package Comparison — Compare alternatives side-by-side (features, size, popularity)
  • Bundle Size Analysis — Minified/gzipped sizes, tree-shaking, impact on your bundle
  • Similar Packages — Find alternatives and similar packages
  • Search — Find packages with ranking and scores
  • Details — Versions, dependencies, download stats, deprecation status
  • Security — Vulnerability check and safe version tips
  • Compatibility — Peer dependency and version conflicts
  • Quality — Maintenance and community metrics
  • Version compare — Breaking changes and semver
  • NPX check — Validate npx commands before running

Install & use

No global install. Add to Cursor or Claude config:

Cursor — ~/.cursor/mcp.json:

{
  "mcpServers": {
    "npm-registry-mcp": {
      "command": "npx",
      "args": ["@alisaitteke/npm-mcp"]
    }
  }
}

Claude Desktop — ~/Library/Application Support/Claude/claude_desktop_config.json (macOS):

{
  "mcpServers": {
    "npm-registry-mcp": {
      "command": "npx",
      "args": ["@alisaitteke/npm-mcp"]
    }
  }
}
Global install (optional)
npm install -g @alisaitteke/npm-mcp

Then use "command": "npm-mcp" (no args) in the config above.

What you can ask

Once the server is connected, you can ask things like:

  • “Search for React state management libraries”
  • “Security audit for express@4.18”
  • “Is lodash@4.17 compatible with my current deps?”
  • “Compare React 17 and 18”
  • “Quality check for date-fns”
  • “Is it safe to run npx create-next-app?”

License

MIT

Contributors

Ali Sait Teke

Creator & Maintainer

Thanks to everyone who helps improve this project!

Frequently asked questions

What is io.github.alisaitteke/npm-mcp?

MCP server for npm package management, security analysis, and compatibility checking

How do I install io.github.alisaitteke/npm-mcp?

It runs on your machine. In Claude Code: claude mcp add npm-mcp -- npx -y @alisaitteke/npm-mcp@0.0.3. For other clients, paste the JSON configuration from this page into their MCP settings.

Does io.github.alisaitteke/npm-mcp need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is io.github.alisaitteke/npm-mcp open source?

Yes. Its code is on GitHub under the MIT license.

Who maintains io.github.alisaitteke/npm-mcp?

It is published by alisaitteke. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.