mcpbeat Sign in

Pumpcheck MCP Server

by edgethirteen-www Your server? Claim it
not responding

Pumpcheck is listed as active in the registry but did not answer our last check. It exposes 1 tools.

Detect npm download-pumping before adding a dependency: real usage vs inflated counter.

Uptime history 48 days of history · worst day 0%
48 days agonow
0.0%
Uptime 24h
0 of 91 checks
1
Tools
read from the server
43 ms
Response time
average over 24h
open, no key
Access
streamable-http

What changed 1

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 17 September 2026. No other catalogue keeps this.

17 Sep a tool description was rewritten check_npm_download_trust

Pumpcheck does not always answer

Over the last week it answered 0.0% of our checks. We check every 15 minutes, so you hear about the next outage within the hour — not from your users.

Three servers free · no card

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 5 min ago.

run in your terminal
claude mcp add pumpcheck --transport http https://www.edgethirteen.com/api/mcp/pumpcheck
Settings → Connectors → Add custom connector, then paste this address
https://www.edgethirteen.com/api/mcp/pumpcheck
~/.codex/config.toml
[mcp_servers.pumpcheck]
url = "https://www.edgethirteen.com/api/mcp/pumpcheck"
.cursor/mcp.json
{
  "mcpServers": {
    "pumpcheck": {
      "url": "https://www.edgethirteen.com/api/mcp/pumpcheck"
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "pumpcheck": {
      "type": "http",
      "url": "https://www.edgethirteen.com/api/mcp/pumpcheck"
    }
  }
}

Available tools 1

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

npm
check_npm_download_trust
Check whether an npm package's public download count reflects real adoption. Detects 'download pumping' -- the documented supply-chain technique where a package is published in hundreds of rapid-fire versions so registry mirrors and security scanners inflate its download counter, making an unused or malicious package look popular. Returns npm's headline 30-day count, a spike-resistant estimate of sustained real usage, the share of the month falling on the busiest single day, recent version-flood bursts, and a verdict of clean, unreliable or inflated. Use before adding or recommending a dependency, especially a new or unfamiliar one. This free check does one package per call; auditing a whole package.json or package-lock.json in one pass is a separate $299 product at https://www.edgethirteen.com/tools/pumpcheck.

Endpoints

URLTransportStateLatencyChecked
https://www.edgethirteen.com/api/mcp/pumpcheck streamable-http answering 43 ms 5 min ago

Alternatives to Pumpcheck

same job, measured the same way
MCP Dependency Doctor
by petrovicistefan

Read-only npm dependency diagnostics for AI coding agents.

92 installs/wk local only
Presend dependency checks
by presendapp

Check an npm/PyPI package before an AI agent installs it: 5 focused supply-chain tools.

5 tools answering
Safe Upgrade
by white-hat-lab

Evidence-backed npm upgrade preflight and dependency audits for coding agents, paid via x402.

46 installs/wk local only
Cairn Commons
by cairncommons

Verified, version-pinned records of new dependency bugs: look an error up before searching the web.

25 tools answering
npx-vibe
by devrajsinh-jhala

Read-only npm package and project dependency preflight tools for AI applications.

72 installs/wk local only
P
pkg-oracle — Dependency Trust Oracle
by julian-martin89

Blocks typosquatted or hallucinated npm/PyPI packages before an AI agent installs them.

1 tools answering
Pkgdiet
by om-tajne

Dependency policy and MCP server to stop AI coding agents from installing risky npm packages.

54 installs/wk local only
SendLetter
by sendletter

Send real, printed letters by post across Europe. Requires a free account; quote before sending.

answering

Pumpcheck — questions

Answers built from our own checks of this server.

What can Pumpcheck do?
It exposes 1 tools, read directly from the server on our last check. Among them: check_npm_download_trust. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →
Is Pumpcheck working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 0 of 91 checks got a reply (0.0%), average response time 43 ms. The bar chart above shows every period we have measured.
The registry lists Pumpcheck as active — why does it not respond?
The official MCP registry stores what the author submitted; it does not verify that the server still runs. We check the endpoint ourselves, and this one does not answer. Catalogues that copy the registry without checking will show it as working.
How do I connect Pumpcheck?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does Pumpcheck need an API key?
No. Pumpcheck completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 1 of them are readable on this page. This is what we observed, not what the docs claim.