PackageGuard MCP Server

by dankaten Your server? Claim it

answering

PackageGuard is answering right now. Last checked 2 min ago. It exposes 1 tools.

x402-gated safety checker for npm/PyPI packages before you npm install / pip install.

The linked repository no longer exists on GitHub — it was deleted or made private.

Uptime history 48 days of history · worst day 99%

48 days agonow

100.0%

Uptime 24h

92 of 92 checks

Tools

read from the server

425 ms

Response time

average over 24h

open, no key

Access

streamable-http

This one has been quiet for a while

Quiet is not dead — but it is worth knowing when it wakes up, or when someone else takes it over. We watch the repository and tell you either way.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 2 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add packageguard --transport http https://packageguard-k4s4.onrender.com/mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "packageguard": {
      "url": "https://packageguard-k4s4.onrender.com/mcp"
    }
  }
}

~/.codex/config.toml

[mcp_servers.packageguard]
url = "https://packageguard-k4s4.onrender.com/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "packageguard": {
      "url": "https://packageguard-k4s4.onrender.com/mcp"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "packageguard": {
      "url": "https://packageguard-k4s4.onrender.com/mcp"
    }
  }
}

Available tools 1

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

package

check_package_safety

Check whether an npm or PyPI package is safe to install. Costs $0.005 USDC via x402 per call.

Endpoints

URL	Transport	State	Latency	Checked
https://packageguard-k4s4.onrender.com/mcp	streamable-http	answering	241 ms	2 min ago

Alternatives to PackageGuard

same job, measured the same way

Pkgtruth

by hxckya

Catches hallucinated and slopsquatted npm and PyPI packages before an agent installs them.

722 installs/wk local only

Vdb

by ai-vdb

Check packages for CVEs, slopsquatting, and CISA KEV before your AI agent installs them.

70 installs/wk local only

Cf Package Check

by cfgenius145-sketch

Abandonment checks for WordPress, npm and PyPI packages, priced per call.

2 tools answering

Packagephobia

by pipeworx-io

Packagephobia MCP — install-size analysis for npm packages

37 tools answering

LicenseGuard

by rccaoki-wq

Check if a dependency's license obligates you, based on how you ship. npm, PyPI, Go.

3 tools answering

Mcpgrade

by mcpgrade

Security grades (A-F) for MCP servers. Check one before you install or trust it. mcpgrade.dev

44 installs/wk local only

Verity MCP

by meloliva14

Fail-closed verify-before-you-act gate for AI agents. Signed receipts. Pay-per-call via x402.

74 installs/wk local only

Chainverdict

by chainverdict

Pay-per-call x402 checks before an agent moves money: token safety, wallet risk, identifiers.

20 tools answering

PackageGuard — questions

Answers built from our own checks of this server.

What can PackageGuard do?

It exposes 1 tools, read directly from the server on our last check. Among them: check_package_safety. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is PackageGuard working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 92 of 92 checks got a reply (100.0%), average response time 425 ms. The bar chart above shows every period we have measured.

Is PackageGuard still maintained?

The linked repository no longer exists on GitHub — it was deleted or made private. We show this because it changes what you can expect: an unmaintained server may keep answering for months and then stop without warning.

How do I connect PackageGuard?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does PackageGuard need an API key?

No. PackageGuard completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 1 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is PackageGuard?

It answers our handshake in 425 ms on average, which is faster than 35% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.