pkg-oracle — Dependency Trust Oracle

Official registry AI and agents

Blocks typosquatted or hallucinated npm/PyPI packages before an AI agent installs them.

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (streamable-http)
Claude Code
claude mcp add --transport http pkg-oracle-dependency-trust-oracle 'https://mcp-snowy-dew-9447.fly.dev/mcp'
JSON configuration (Claude Desktop, Cursor, VS Code)
{
    "mcpServers": {
        "pkg-oracle-dependency-trust-oracle": {
            "type": "http",
            "url": "https://mcp-snowy-dew-9447.fly.dev/mcp"
        }
    }
}

Frequently asked questions

What is pkg-oracle — Dependency Trust Oracle?

Blocks typosquatted or hallucinated npm/PyPI packages before an AI agent installs them.

How do I install pkg-oracle — Dependency Trust Oracle?

It runs as a remote server. In Claude Code: claude mcp add --transport http pkg-oracle-dependency-trust-oracle 'https://mcp-snowy-dew-9447.fly.dev/mcp'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does pkg-oracle — Dependency Trust Oracle need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Who maintains pkg-oracle — Dependency Trust Oracle?

It is published by julian-martin89. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.