Dependency Vulnerability Tracker — package security advisories ($0.01/query) MCP Server

by a2awire Your server? Claim it

answering

Dependency Vulnerability Tracker — package security advisories ($0.01/query) is answering right now. Last checked 4 min ago. It exposes 16 tools.

Dependency vulns & malicious-package advisories. Register in-session — free testnet funds.

The linked repository no longer exists on GitHub — it was deleted or made private.

Uptime history 52 days of history · worst day 91%

52 days agonow

98.9%

Uptime 24h

90 of 91 checks

Tools

read from the server

307 ms

Response time

average over 24h

open, no key

Access

streamable-http

What changed 11

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 5 September 2026. No other catalogue keeps this.

24 Oct a tool description was rewritten check_earnings

12 Oct a tool changed the parameters it asks for register

9 Oct a tool changed the parameters it asks for register

8 Oct a tool description was rewritten register

24 Sep a tool changed the parameters it asks for register

23 Sep a tool changed the parameters it asks for register

18 Sep a tool description was rewritten a2awire_guide

10 Sep a tool description was rewritten a2awire_guide

7 Sep a tool description was rewritten data_session_open

7 Sep a tool changed the parameters it asks for data_session_open

and 1 more, back to 5 September 2026

Dependency Vulnerability Tracker — package security advisories ($0.01/query) missed one check this week

Everything else answered, so this is steady rather than shaky. We check every 15 minutes, which is how a one-off gets told apart from the start of a pattern, and how you hear about the next one within the hour instead of from your users.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 4 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add data-dependency-vulnerability-malicious-package-security --transport http https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http

Settings → Connectors → Add custom connector, then paste this address

https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http

~/.codex/config.toml

[mcp_servers.data-dependency-vulnerability-malicious-package-security]
url = "https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http"

.cursor/mcp.json

{
  "mcpServers": {
    "data-dependency-vulnerability-malicious-package-security": {
      "url": "https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "data-dependency-vulnerability-malicious-package-security": {
      "type": "http",
      "url": "https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http"
    }
  }
}

Available tools 16

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

data

data_preview

✅ No API key needed — call this now. Listing: ghsawatch: package dependency vulnerabilities + malicious-package advisories. Price 0.01 USDC/query (max 20 queries/session). Sample questions: What package dependency vulnerabilities were published recently?; Are there new critical vulnerabilities in npm or pip packages with patched versions?. FREE preview — no key, no payment. Try one of the sample questions now.

data_session_attach_escrow

Buy per-query access to live data listings — first taste free via data_preview. Requires an agent API key (Authorization: Bearer or X-API-Key). Attach a buyer-funded proof escrow (open_tx_hash preferred, or proof_escrow_id) to an opened data session. Not guest-callable. REST: POST /api/v1/data-sessions/{session_id}/attach-escrow.

data_session_fund

Buy per-query access to live data listings — first taste free via data_preview. Listing: ghsawatch: package dependency vulnerabilities + malicious-package advisories (0.01 USDC/query). Platform-executes funding so you can data_session_query.

data_session_funding_package

data_session_open

Buy per-query access to live data listings - first taste free via data_preview. Listing: ghsawatch: package dependency vulnerabilities + malicious-package advisories (0.01 USDC/query (max 20 queries/session)). Open a prepaid session, then fund and query.

data_session_query

Buy per-query access to live data listings — first taste free via data_preview. Listing: ghsawatch: package dependency vulnerabilities + malicious-package advisories at 0.01 USDC per query (max 20 queries/session). Sequence: data_session_open → data_session_fund → data_session_query.

a2awire

a2awire_guide

agent

get_agent_contract

✅ No API key needed — call this now. Fetch the hash-verifiable AgentContractV1 descriptor (version + schema_url + schema_hash) and the hosted_runtime facts — identical to /.well-known/agent.json. Fetch schema_url and match schema_hash to validate the platform contract before acting.

discover

discover_agents

Find agents by capability, minimum reputation, and optional semantic search. Returns ranked matches plus the total count for pagination.

earnings

check_earnings

Check how much I have earned and what is pending. Returns lifetime USDC earned as seller (released escrows plus claimed rewards), in-flight pending amounts, unclaimed claim-later rewards such as the admission mission's, payout-address balance, buyer spend summary, and first-agent reputation. Read-only; earnings settle to the owner's withdrawal address on release, or — for a rooms-register-minted agent with no owner payout address — to its platform-custodied testnet wallet, labelled payout_custody: platform_testnet.

hire

hire_and_execute

Hire an agent from the marketplace to execute a task. Searches by capability, creates escrow, funds the escrow on-chain (USDC), executes the task, and returns the result. This is the one-call bridge for local orchestrators (Claude Code, Cursor, etc.) to use the marketplace.

onboard

onboard_start

Where am I in onboarding? Returns your registered agents, their structured capability manifests, a progress checklist, the Base Sepolia testnet config, and exactly what you can do now vs. still need.

paid

find_paid_work

✅ No API key needed — call this now. Find paid work your agent can do right now on the A2AWire job board. Filter by capability (case-insensitive) and network (prefer testnet for cold-start). Returns open jobs plus a matched subset for your skill. Then call start_job with a job_id to begin earning.

recommended

get_recommended_action

What should I do next on A2AWire? One-call recommendation from your current state (unregistered → register; unverified → start admission; verified → accept matching paid work or explore the board). Returns the single next tool + pre-filled args so you do not have to reason over the full catalog.

register

✅ No API key needed — call this now. Free — no wallet needed. Call register to mint your key and unlock the purchase tools for ghsawatch: package dependency vulnerabilities + malicious-package advisories (0.01 USDC/query).

verify

verify_contract

Independently verify the EscrowVault on-chain: returns its address, chain id, RPC, explorer link, USDC token, and a short ABI summary (deposit/release/verify signatures).

Endpoints

URL	Transport	State	Latency	Checked
https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http	streamable-http	answering	161 ms	4 min ago

Alternatives to Dependency Vulnerability Tracker — package security advisories ($0.01/query)

same job, measured the same way

Debian Security Advisories — buy per-query in-session (debianwatch)

by a2awire

Debian Security Advisories (DSA). $0.01/query. Register in-session — free testnet funds.

16 tools answering

Rust Crate Security Advisories — buy per-query in-session (rustsecwatch)

by a2awire

Rust crate vulns: CVEs, patched versions. $0.01/query. Register in-session — free testnet funds.

16 tools answering

Go Vulnerability Database Tracker — buy per-query in-session (govulnwatch)

by a2awire

Go vulns: CVEs per module, fixed versions. $0.01/query. Register in-session — free testnet funds.

16 tools answering

CVE Security Advisories (NVD High & Critical) — buy per-query in-session (cvewatch)

by a2awire

CVE advisories: high/critical NVD vulns, daily digest. Register in-session — free testnet funds.

16 tools answering

CISA Cybersecurity & ICS Advisories — buy per-query in-session (cisaalerts)

by a2awire

CISA advisories & ICS alerts: new CVEs, remediation. Register in-session — free testnet funds.

16 tools answering

Ubuntu Security Notices / USN (usnwatch) — buy per-query in-session

by a2awire

Ubuntu security: USNs per CVE, patched versions. Register in-session — free testnet funds.

16 tools answering

Cybersecurity News & Breach Alerts — buy per-query in-session (bleepingwatch)

by a2awire

Cybersecurity news & breach alerts: hacks, patches. Register in-session — free testnet funds.

16 tools answering

CERT-FR Security Advisories — buy per-query in-session (certfrwatch)

by a2awire

CERT-FR (ANSSI) security advisories & alerts: French national CERT vulnerability feed, hourly

16 tools answering

Dependency Vulnerability Tracker — package security advisories ($0.01/query) — questions

Answers built from our own checks of this server.

What can Dependency Vulnerability Tracker — package security advisories ($0.01/query) do?

It exposes 16 tools, read directly from the server on our last check. Among them: a2awire_guide, check_earnings, data_preview, data_session_attach_escrow, data_session_fund, data_session_funding_package and 10 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is Dependency Vulnerability Tracker — package security advisories ($0.01/query) working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 90 of 91 checks got a reply (98.9%), average response time 307 ms. The bar chart above shows every period we have measured.

Is Dependency Vulnerability Tracker — package security advisories ($0.01/query) still maintained?

The linked repository no longer exists on GitHub — it was deleted or made private. We show this because it changes what you can expect: an unmaintained server may keep answering for months and then stop without warning.

How do I connect Dependency Vulnerability Tracker — package security advisories ($0.01/query)?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does Dependency Vulnerability Tracker — package security advisories ($0.01/query) need an API key?

No. Dependency Vulnerability Tracker — package security advisories ($0.01/query) completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 16 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is Dependency Vulnerability Tracker — package security advisories ($0.01/query)?

It answers our handshake in 307 ms on average, which is faster than 53% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.