English Français العربية

io.github.white-hat-lab/safe-upgrade

Official registry Developer tools

Evidence-backed npm upgrade preflight and dependency audits for coding agents, paid via x402.

Source code

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package safe-upgrade-mcp
Claude Code 
claude mcp add safe-upgrade -e 'PAYER_PRIVATE_KEY=<your payer_private_key>' -- npx -y safe-upgrade-mcp@0.2.0
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "safe-upgrade": {
            "command": "npx",
            "args": [
                "-y",
                "safe-upgrade-mcp@0.2.0"
            ],
            "env": {
                "PAYER_PRIVATE_KEY": "<your payer_private_key>"
            }
        }
    }
}

Environment variables

  • PAYER_PRIVATE_KEY secret Private key of a wallet holding USDC on Base, used to sign x402 payments per call. Use a dedicated low-balance wallet.

Frequently asked questions

What is io.github.white-hat-lab/safe-upgrade?

Evidence-backed npm upgrade preflight and dependency audits for coding agents, paid via x402.

How do I install io.github.white-hat-lab/safe-upgrade?

It runs on your machine. In Claude Code: claude mcp add safe-upgrade -e 'PAYER_PRIVATE_KEY=<your payer_private_key>' -- npx -y safe-upgrade-mcp@0.2.0. For other clients, paste the JSON configuration from this page into their MCP settings.

Does io.github.white-hat-lab/safe-upgrade need an API key?

Yes. It expects PAYER_PRIVATE_KEY, which you set in its configuration.

Is io.github.white-hat-lab/safe-upgrade open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains io.github.white-hat-lab/safe-upgrade?

It is published by white-hat-lab. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.