English Français العربية

io.github.rog0x/dep

Official registry Security

License check, outdated deps, security for AI agents

Source code Documentation

What can you do with io.github.rog0x/dep?

  • project_dir (string, required): Absolute path to the project directory containing a package.json.

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package @rog0x/mcp-dep-tools
Claude Code 
claude mcp add dep -- npx -y @rog0x/mcp-dep-tools@1.0.1
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "dep": {
            "command": "npx",
            "args": [
                "-y",
                "@rog0x/mcp-dep-tools@1.0.1"
            ]
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. mcp-dep-tools
  2. Tools
  3. Setup
  4. Usage with Claude Desktop
  5. All tools accept a single parameter
  6. License

mcp-dep-tools

MCP server providing dependency and package management tools for AI agents. Analyze licenses, find outdated packages, visualize dependency trees, estimate bundle sizes, and audit security vulnerabilities — all from your AI assistant.

Tools

dep_check_licenses

Analyze licenses of all dependencies in a project. Lists each dependency's license type, flags copyleft (GPL) and unknown licenses, and checks for compatibility issues.

dep_find_outdated

Check which dependencies are outdated. Compares installed or specified versions against the latest on npm, categorizes updates as major/minor/patch, and shows how many days since the latest version was published.

dep_analyze_tree

Build and display the dependency tree. Shows direct dependencies and their transitive sub-dependencies, calculates maximum depth, detects circular dependencies, and counts total transitive packages.

dep_analyze_size

Estimate total bundle size from package.json without installing node_modules. Queries the Bundlephobia API for each production dependency to get minified and gzipped sizes.

dep_security_audit

Check dependencies for known security vulnerabilities. Runs npm audit when a lockfile is present, otherwise queries the npm registry advisory API directly. Reports severity levels, affected version ranges, and fix recommendations.

Setup

npm install
npm run build

Usage with Claude Desktop

Add to your Claude Desktop config:

{
  "mcpServers": {
    "dep-tools": {
      "command": "node",
      "args": ["path/to/mcp-dep-tools/dist/index.js"]
    }
  }
}

All tools accept a single parameter

  • project_dir (string, required): Absolute path to the project directory containing a package.json.

License

MIT

Frequently asked questions

What is io.github.rog0x/dep?

License check, outdated deps, security for AI agents

How do I install io.github.rog0x/dep?

It runs on your machine. In Claude Code: claude mcp add dep -- npx -y @rog0x/mcp-dep-tools@1.0.1. For other clients, paste the JSON configuration from this page into their MCP settings.

Does io.github.rog0x/dep need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is io.github.rog0x/dep open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains io.github.rog0x/dep?

It is published by rog0x. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.