Datakoot › Servers › Package Intel
Packages · MCP Server

Package Intel

Vet an npm, PyPI or crates dependency before an agent installs it — metadata, versions, download stats, dependency trees and a composite health score, from the official registries and deps.dev. No API key.

terminal
$ claude mcp add --transport http package-intel https://package.datakoot.com/mcp
Endpoint: package.datakoot.com/mcp6 toolsSources: npm · PyPI · cratesKeyless
The tools

Everything this server exposes.

The exact tools your agent sees, with their real parameters and the shape of what comes back. Descriptions are written for the model, so it knows when to call each one on its own.

package_infoSource: npm / PyPI / crates

Core metadata for a package — latest version, description, license, homepage, source repo, maintainers, and whether it's deprecated. Use before installing or recommending a dependency.

Parameters
ecosystemstringrequired
One of: npm, pypi, cargo.
namestringrequired
The package name, e.g. express.
package_info("npm","express")
{
  "name": "express",
  "latest": "4.19.2",
  "license": "MIT",
  "deprecated": false,
  "repository": "github.com/expressjs/express",
  "maintainers": 12
}
package_versionsSource: registries

Recent released versions with dates, newest first — gauge how actively a package is maintained.

Parameters
ecosystemstringrequired
npm, pypi or cargo.
namestringrequired
The package name.
limitintegeroptional
How many versions to return.
package_versions("npm","express",3)
{
  "name": "express",
  "versions": [
    {
      "version": "4.19.2",
      "date": "2024-03-25"
    },
    {
      "version": "4.19.1",
      "date": "2024-03-20"
    },
    {
      "version": "4.19.0",
      "date": "2024-03-16"
    }
  ]
}
package_downloadsSource: registries

Recent download counts — judge how widely used and battle-tested a dependency is.

Parameters
ecosystemstringrequired
npm, pypi or cargo.
namestringrequired
The package name.
package_downloads("npm","express")
{
  "name": "express",
  "ecosystem": "npm",
  "weeklyDownloads": 31240000
}
package_dependenciesSource: deps.dev

Direct dependencies of a version (default latest), via deps.dev — see what a package pulls in before adding it.

Parameters
ecosystemstringrequired
npm, pypi or cargo.
namestringrequired
The package name.
versionstringoptional
Defaults to the latest version.
package_dependencies("npm","express")
{
  "name": "express",
  "version": "4.19.2",
  "count": 31,
  "dependencies": [
    "accepts",
    "body-parser",
    "cookie",
    "qs",
    "send"
  ]
}
package_healthSource: composite

A composite trust/health check — release recency, deprecation, license present, maintainer and dependency counts, and any known security advisories.

Parameters
ecosystemstringrequired
npm, pypi or cargo.
namestringrequired
The package name.
package_health("npm","express")
{
  "name": "express",
  "status": "healthy",
  "lastRelease": "2024-03-25",
  "license": "MIT",
  "maintainers": 12,
  "advisories": 0
}
package_searchSource: npm / crates

Search packages by keyword and get the top matches with descriptions. npm and cargo (PyPI has no public search API).

Parameters
ecosystemstringrequired
npm or cargo.
querystringrequired
Search keywords.
limitintegeroptional
How many results to return.
package_search("npm","http client",2)
{
  "query": "http client",
  "results": [
    {
      "name": "axios",
      "description": "Promise based HTTP client"
    },
    {
      "name": "got",
      "description": "Human-friendly HTTP requests"
    }
  ]
}
Data sources

The official registries.

Real registry data — not scraped listings — so an agent can trust what it installs.

npm, PyPI & crates.io

The official registries for each ecosystem — metadata, versions, downloads and search, straight from the source.

deps.dev

Google's open dependency dataset — powers package_dependencies with precise, resolved dependency lists.

Connect it

One line, any MCP client.

Same endpoint everywhere. No account, no key, no config file.

Claude
claude mcp add --transport http package-intel https://package.datakoot.com/mcp
Cursor
Settings → MCP → Add → https://package.datakoot.com/mcp
Windsurf
Add MCP server → https://package.datakoot.com/mcp
Companion extension

Prefer to look it up yourself?

The matching Chrome extension puts the same data in your browser — no agent required.

Package Guard

Check any npm, PyPI or crates package’s health, versions and advisories right from your browser — the same data as the server. Free, keyless, no signup.

Get the extension →
Package Intel — FAQ

Questions about this server

npm, PyPI and crates.io for metadata, versions, downloads and dependencies. Search covers npm and cargo (PyPI has no public search API).

No. Datakoot handles the registry and deps.dev calls for you — connect with one keyless line.

Read live from the registries, so a version published minutes ago shows up. Responses are lightly cached for speed.

Let your agent vet what it installs.

Free to start. One line. No key to leak.

Start freeBack to all servers