English Français العربية

io.github.ofershap/npm-plus

Official registry Search and web

npm MCP — search packages, bundle sizes, vulnerabilities, compare downloads.

Source code Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package mcp-server-npm-plus
Claude Code 
claude mcp add npm-plus -- npx -y mcp-server-npm-plus@1.0.1
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "npm-plus": {
            "command": "npx",
            "args": [
                "-y",
                "mcp-server-npm-plus@1.0.1"
            ]
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. mcp-server-npm-plus
  2. Why
  3. Tools
  4. Quick Start
  5. Example Prompts
  6. Development
  7. See also
  8. Author
  9. License

mcp-server-npm-plus

npm package research from your AI assistant. Search packages, check bundle sizes, scan for vulnerabilities, compare download counts, and inspect dependency trees. No API keys needed.

npx mcp-server-npm-plus

Works with Claude Desktop, Cursor, VS Code Copilot, and any MCP client. Uses public npm registry APIs.

Demo built with remotion-readme-kit

Why

Choosing between npm packages usually means opening a bunch of browser tabs: npm for package info, Bundlephobia for size, Snyk for vulnerabilities, npm trends for download comparisons. This server puts all of that in one place, accessible through your AI assistant. Ask "compare zustand vs jotai vs valtio" and get download numbers, bundle sizes, and dependency counts side by side. Ask "are there any known vulnerabilities in express?" and get the answer without leaving your editor. It uses only public npm APIs, so there's nothing to sign up for.

Tools

ToolDescription
searchSearch npm packages by query
package_infoGet detailed info: description, license, repo, dependencies
downloadsGet download stats for a package
compare_downloadsCompare download counts across multiple packages
bundle_sizeGet bundle size (minified + gzip) via Bundlephobia
vulnerabilitiesGet vulnerability info and advisory links
dependency_treeShow direct dependencies as a tree
download_trendsDaily breakdown with sparkline

Quick Start

Cursor

Add to .cursor/mcp.json:

{
  "mcpServers": {
    "npm-plus": {
      "command": "npx",
      "args": ["mcp-server-npm-plus"]
    }
  }
}
Claude Desktop

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "npm-plus": {
      "command": "npx",
      "args": ["mcp-server-npm-plus"]
    }
  }
}
VS Code

Use the MCP extension and configure the server with npx mcp-server-npm-plus.

Example Prompts

  • "Search npm for React state management libraries"
  • "What's the bundle size of lodash?"
  • "Compare downloads of zustand vs jotai vs valtio"
  • "Check for vulnerabilities in express"
  • "Show me the dependency tree for next"
  • "What are the download trends for typescript this month?"

Development

npm install
npm run typecheck
npm run build
npm test
npm run lint
npm run format

See also

More MCP servers and developer tools on my portfolio.

Author

README built with README Builder

License

MIT © 2026 Ofer Shapira

Frequently asked questions

What is io.github.ofershap/npm-plus?

npm MCP — search packages, bundle sizes, vulnerabilities, compare downloads.

How do I install io.github.ofershap/npm-plus?

It runs on your machine. In Claude Code: claude mcp add npm-plus -- npx -y mcp-server-npm-plus@1.0.1. For other clients, paste the JSON configuration from this page into their MCP settings.

Does io.github.ofershap/npm-plus need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is io.github.ofershap/npm-plus open source?

Yes. Its code is on GitHub under the MIT license.

Who maintains io.github.ofershap/npm-plus?

It is published by ofershap. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.