PackageGuard is answering right now. Last checked 5 min ago. It exposes 1 tools.
x402-gated safety checker for npm/PyPI packages before you npm install / pip install.
The linked repository no longer exists on GitHub — it was deleted or made private.
PackageGuard missed one check this week
Everything else answered, so this is steady rather than shaky. We check every 15 minutes, which is how a one-off gets told apart from the start of a pattern, and how you hear about the next one within the hour instead of from your users.
Connect this server
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 5 min ago.
claude mcp add packageguard --transport http https://packageguard-k4s4.onrender.com/mcphttps://packageguard-k4s4.onrender.com/mcp[mcp_servers.packageguard]
url = "https://packageguard-k4s4.onrender.com/mcp"{
"mcpServers": {
"packageguard": {
"url": "https://packageguard-k4s4.onrender.com/mcp"
}
}
}{
"servers": {
"packageguard": {
"type": "http",
"url": "https://packageguard-k4s4.onrender.com/mcp"
}
}
}Available tools 1
Read directly from the server with tools/list, grouped by what they act on.
If a tool disappears, we record the date.
check_package_safety
Endpoints
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://packageguard-k4s4.onrender.com/mcp | streamable-http | answering | 217 ms | 5 min ago |
Alternatives to PackageGuard
same job, measured the same wayCatches hallucinated and slopsquatted npm and PyPI packages before an agent installs them.
Check packages for CVEs, slopsquatting, and CISA KEV before your AI agent installs them.
Check an npm/PyPI package before an AI agent installs it: 5 focused supply-chain tools.
Safety checks before you sign, pay or install: contract, token and package scans, phishing, OFAC.
Pre-payment safety gate for x402 agents: PII screening, spend policy, replay checks before signing.
Solana token rug check before you buy: SAFE/CAUTION/DANGER from chain state, paid per call via x402.
Attestari's verdict on an npm or PyPI package version, asked before an agent installs it.
Abandonment checks for WordPress, npm and PyPI packages, priced per call.
PackageGuard — questions
Answers built from our own checks of this server.