UK Data: Software packages and vulnerabilities MCP Server

by co-reliness Your server? Claim it

answering

UK Data: Software packages and vulnerabilities is answering right now. Last checked 9 min ago. It exposes 2 tools.

Package versions, licences and known vulnerabilities for npm, PyPI, crates, Go, Maven, NuGet

Uptime history 69 hours of history

69 hours agonow

100.0%

Uptime 24h

91 of 91 checks

Tools

read from the server

113 ms

Response time

average over 24h

open, no key

Access

streamable-http

Nothing serious here today

Today is the operative word: we check UK Data: Software packages and vulnerabilities every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 9 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add software-supply-chain --transport http https://ukdata.reliness.co.uk/mcp/software-supply-chain

Settings → Connectors → Add custom connector, then paste this address

https://ukdata.reliness.co.uk/mcp/software-supply-chain

~/.codex/config.toml

[mcp_servers.software-supply-chain]
url = "https://ukdata.reliness.co.uk/mcp/software-supply-chain"

.cursor/mcp.json

{
  "mcpServers": {
    "software-supply-chain": {
      "url": "https://ukdata.reliness.co.uk/mcp/software-supply-chain"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "software-supply-chain": {
      "type": "http",
      "url": "https://ukdata.reliness.co.uk/mcp/software-supply-chain"
    }
  }
}

Available tools 2

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

package

package_info

Latest version, publish date, deprecation, licences, advisories and links for a package (deps.dev). (cost: 1 credit)

vuln

vuln_check

Known vulnerabilities (OSV) for a package@version or a list of up to 500 (array of {ecosystem,name,version} or text "name@version" per line), with severity and fixed versions. (cost: 2 credits)

Endpoints

URL	Transport	State	Latency	Checked
https://ukdata.reliness.co.uk/mcp/software-supply-chain	streamable-http	answering	72 ms	9 min ago

Alternatives to UK Data: Software packages and vulnerabilities

same job, measured the same way

DepScout

by yc-droid

Scan packages and lockfiles (npm, PyPI, Go, Maven, Cargo, NuGet) for vulnerabilities and malware.

4 tools answering

UK Data: CVEs and package popularity

by co-reliness

Software vulnerabilities (CVEs) from the US NVD and package downloads for npm, PyPI and crates

4 tools answering

Dependency Vulnerability Check (OSV)

by brunckel

Known vulnerabilities and fixed versions for npm, PyPI, Go, Maven packages from OSV.dev via Apify.

answering

OSV Dependency Vulnerability Check

by fairquery

Check npm, PyPI, Go and Maven packages or lockfiles against OSV.dev: CVEs, CVSS, fixed versions.

answering

Dependency check

by ladanyin

Check a package version for known vulnerabilities and Packagist release facts.

2 tools answering

OSV Advisories

by basitalisandhu

Query OSV.dev for known vulnerabilities by package and version, and scan lockfiles in batch.

local only

Vulnerability Exposure

by mrfrazer25

Confirmed vulnerabilities and exposure for IPs, domains and software versions (NVD, CISA KEV, EPSS)

1 046 installs/wk local only

Cve Intel MCP

by robertoyanguas-ops

Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and re

2 tools answering

UK Data: Software packages and vulnerabilities — questions

Answers built from our own checks of this server.

What can UK Data: Software packages and vulnerabilities do?

It exposes 2 tools, read directly from the server on our last check. Among them: package_info, vuln_check. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is UK Data: Software packages and vulnerabilities working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 113 ms. The bar chart above shows every period we have measured.

How do I connect UK Data: Software packages and vulnerabilities?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does UK Data: Software packages and vulnerabilities need an API key?

No. UK Data: Software packages and vulnerabilities completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 2 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is UK Data: Software packages and vulnerabilities?

It answers our handshake in 113 ms on average, which is faster than 92% of all working MCP servers we measure. That puts it in the quick quarter of the ecosystem. The comparison comes from our own checks across the whole registry, every 15 minutes.