Package Intel runs on your own machine — the client starts it, so there is no endpoint to ping. 24 installs a week from npm. Last commit 15 Aug 2026.
npm, PyPI & crates.io health, vulns and dependency graphs. Runs locally, no API key.
Today is the operative word: we check Package Intel every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add package-intel -- npx -y package-intel-mcp
{
"mcpServers": {
"package-intel": {
"command": "npx",
"args": [
"-y",
"package-intel-mcp"
]
}
}
}
[mcp_servers.package-intel]
command = "npx"
args = ["-y", "package-intel-mcp"]
{
"mcpServers": {
"package-intel": {
"command": "npx",
"args": [
"-y",
"package-intel-mcp"
]
}
}
}
{
"servers": {
"package-intel": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"package-intel-mcp"
]
}
}
}
Optional settings from the registry entry, left out of the block above:
API_URL (Base URL of the backing API), NETWORK (CAIP-2 network id for payments. eip155:8453 is Base mainnet), X402_PRIVATE_KEY (Optional. Leave unset to use the free tools. Setting it to the private key of a wallet funded with USDC on NETWORK additionally unlocks package_health and package_batch_health, paid per call. Use a dedicated low-balance wallet: this is a hot key that spends automatically), X402_TX_HASH (Optional. Set to "true" to expose the paid tools without a wallet, paying instead by passing the tx_hash of a USDC transfer you settled yourself. For agents that manage their own on-chain payments).
Package intelligence for AI agents across npm, PyPI, crates.io and deps.dev. No API keys.
npm, PyPI & crates.io intel for AI agents: versions, popularity, deps, health. No API keys.
Is this dependency still maintained? Scores npm, PyPI packages and GitHub repos 0-100.
Live npm/PyPI dependency-health verdicts so AI agents stop recommending stale or CVE'd packages
Known vulnerabilities and fixed versions for npm, PyPI, Go, Maven packages from OSV.dev via Apify.
Check npm, PyPI, Go and Maven packages or lockfiles against OSV.dev: CVEs, CVSS, fixed versions.
Generate Word documents locally with headings, paragraphs, and tables. No network and no key.
Dev-registry data: npm/PyPI/Docker/VS Code packages, dep graphs, vulns, 50+ ecosystems.
Answers built from our own checks of this server.