English Français العربية

UK Data: Software packages and vulnerabilities

Official registry Developer tools

Package versions, licences and known vulnerabilities for npm, PyPI, crates, Go, Maven, NuGet

Website

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http uk-data-software-packages-and-vulnerabil 'https://ukdata.reliness.co.uk/mcp/software-supply-chain' --header 'Authorization: <Optional. Bearer <key> for more than the free daily allowance; free key from POST https://ukdata.reliness.co.uk/keys>'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "uk-data-software-packages-and-vulnerabil": {
            "type": "http",
            "url": "https://ukdata.reliness.co.uk/mcp/software-supply-chain",
            "headers": {
                "Authorization": "<Optional. Bearer <key> for more than the free daily allowance; free key from POST https://ukdata.reliness.co.uk/keys>"
            }
        }
    }
}

Frequently asked questions

What is UK Data: Software packages and vulnerabilities?

Package versions, licences and known vulnerabilities for npm, PyPI, crates, Go, Maven, NuGet

How do I install UK Data: Software packages and vulnerabilities?

It runs as a remote server. In Claude Code: claude mcp add --transport http uk-data-software-packages-and-vulnerabil 'https://ukdata.reliness.co.uk/mcp/software-supply-chain' --header 'Authorization: <Optional. Bearer <key> for more than the free daily allowance; free key from POST https://ukdata.reliness.co.uk/keys>'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does UK Data: Software packages and vulnerabilities need an API key?

Yes. It expects Authorization, which you set in its configuration.

Who maintains UK Data: Software packages and vulnerabilities?

It is published by uk.co.reliness. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.