mcpbeat Sign in

whichlib MCP Server

answering

whichlib is answering right now. Last checked 5 min ago. 287 installs a week from npm. It exposes 3 tools. Last commit 15 Oct 2026.

Dependency picker for coding agents: recommends, compares and scores GitHub repos with a verdict.

Installs per day peak 278 · avg 37 · +562% w/w
a month agotoday
Uptime history 14 days of history
14 days agonow
100.0%
Uptime 24h
92 of 92 checks
3
Tools
read from the server
192 ms
Response time
average over 24h
287
Installs / week
npm and PyPI

What changed 8

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 3 October 2026. No other catalogue keeps this.

15 Oct a tool changed version2 times that day
14 Oct a tool changed version
7 Oct 3 tools changed the parameters they ask for compare_repos, recommend_repos, trending_repos
7 Oct a tool changed version
3 Oct a tool changed version
and 1 more, back to 3 October 2026

What the code does

We read the source, 22 h ago · tools taken from the live server · rules ccca72095570

In the project's build, not in the package

Found in continuous integration, deployment or infrastructure files, or in a neighbouring package of the same monorepo. None of this is installed when you add the server: it describes how the project is built and released. We list it because a leaked key in a build pipeline is still a real problem, but it is not something this server does on your machine.

Page executes code built at runtime site/repos/index.html:428
    els.banner.innerHTML = html;

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

Nothing serious here today

Today is the operative word: we check whichlib every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Three servers free · no card

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 5 min ago.

run in your terminal
claude mcp add whichlib --transport http https://whichlib.com/mcp
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "whichlib": {
      "url": "https://whichlib.com/mcp"
    }
  }
}
~/.codex/config.toml
[mcp_servers.whichlib]
url = "https://whichlib.com/mcp"
.cursor/mcp.json
{
  "mcpServers": {
    "whichlib": {
      "url": "https://whichlib.com/mcp"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "whichlib": {
      "url": "https://whichlib.com/mcp"
    }
  }
}

This one needs environment variables set before it will start: GITHUB_TOKEN (Optional. Raises GitHub's search limit from 10 to 30 requests per minute. A fine-grained token with no permissions is enough.), WHICHLIB_TELEMETRY (Optional. Set to "off" to disable anonymous call counting (tool name, random install id, version, platform, Node major). DO_NOT_TRACK=1 also disables it.). The author declared them in the registry entry; get the values from the project itself.

Available tools 3

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

compare
compare_repos
Compare 2-10 known GitHub repositories side by side, best score first: score and tier, stars, forks, open issues, last push, license, npm/PyPI weekly downloads (only when the registry links back to the repository) and a verdict. Each result has a 0-100 score (momentum 40% (stars gained per week; without history, lifetime stars per week scaled by the npm/PyPI download trend), maintenance 25%, adoption incl. npm/PyPI weekly downloads 25%, license 10%), a tier (Strong >=75, Solid >=50, Watch >=25, Avoid <25; New for repos under 30 days old, too new to judge), a one-line verdict and the full breakdown. Use this to choose between candidates you already have (for example zod vs valibot) or to check a dependency the project already uses; use recommend_repos to find candidates. One GitHub API call per repository plus npm/PyPI lookups. A repository that does not exist is listed under notFound and the rest are still compared; the call fails only if none can be fetched, or when GitHub's rate limit is reached or the token is rejected. Hosted: 50 free tool calls per day per user; send header X-GitHub-Token with your own GitHub token for unlimited use, or run the npm package locally (npx -y whichlib).
recommend
recommend_repos
Find the best open-source library for a need before adding a dependency. Give the need in plain words and get up to `limit` GitHub repositories ranked by fit = score x relevance to the need. Each result has a 0-100 score (momentum 40% (stars gained per week; without history, lifetime stars per week scaled by the npm/PyPI download trend), maintenance 25%, adoption incl. npm/PyPI weekly downloads 25%, license 10%), a tier (Strong >=75, Solid >=50, Watch >=25, Avoid <25; New for repos under 30 days old, too new to judge), a one-line verdict and the full breakdown. Use this when you do not yet have candidates; use compare_repos when you already have names. Makes 3 GitHub searches plus npm/PyPI lookups for the shortlist. Hosted: 50 free tool calls per day per user; send header X-GitHub-Token with your own GitHub token for unlimited use, or run the npm package locally (npx -y whichlib).
trending
trending_repos
Discover projects: the most-starred GitHub repositories created in the last day, week or month, or with period "rising" repositories of any age that gained the most stars this week (like GitHub Trending; risingRank keeps that order). Optionally one language; each scored and returned sorted by score (starsRank keeps the stars order). Each result has a 0-100 score (momentum 40% (stars gained per week; without history, lifetime stars per week scaled by the npm/PyPI download trend), maintenance 25%, adoption incl. npm/PyPI weekly downloads 25%, license 10%), a tier (Strong >=75, Solid >=50, Watch >=25, Avoid <25; New for repos under 30 days old, too new to judge), a one-line verdict and the full breakdown. Not the right tool for picking a dependency, since new repositories have little maintenance history; use recommend_repos for that. One GitHub search (rising: one download of the daily list from raw.githubusercontent.com instead), plus one npm/PyPI lookup per repository when withDownloads is true. Hosted: 50 free tool calls per day per user; send header X-GitHub-Token with your own GitHub token for unlimited use, or run the npm package locally (npx -y whichlib).

Endpoints

URLTransportStateLatencyChecked
https://whichlib.com/mcp streamable-http answering 282 ms 5 min ago

Alternatives to whichlib

same job, measured the same way
Flagrix
by flagrix-io

Scan GitHub repos and profiles for malware before cloning — commit-pinned risk verdicts for agents

48 installs/wk local only
Cartograph
by anthony-maio

Repo analysis for coding agents with ranked files, dependency maps, and task-scoped context.

106 installs/wk local only
GitHub CI/CD MCP Server
by devstephenke-sys

GitHub CI/CD MCP server with 70 tools for repos, PRs, Actions, deployments, billing, and more.

local only
Before Users Do
by bhuman-ai

Browser-backed QA with evidence and fix-ready reports for coding agents.

answering
Reposcout
by rakesh1002

Discover, enrich, and rank GitHub repos for an objective with weighted, evidence-based scoring.

24 installs/wk local only
MCP Github
by infoinlet-marketplace

GitHub for AI agents — repos, files, code search, issues, PRs, commits. Read-only default.

27 installs/wk local only
Agentic SDLC MCP
by sakuracianna

Agentic SDLC governance and security controls for AI coding agents working with GitHub.

83 installs/wk local only
Octocrawl
by 77777r7

Web scraper for agents: blocked, empty and wrong pages reported as such, with an Evidence Record.

842 installs/wk 2 tools answering

whichlib — questions

Answers built from our own checks of this server.

What can whichlib do?
It exposes 3 tools, read directly from the server on our last check. Among them: compare_repos, recommend_repos, trending_repos. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →
Is whichlib working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 92 of 92 checks got a reply (100.0%), average response time 192 ms. The bar chart above shows every period we have measured.
How do I connect whichlib?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does whichlib need an API key?
No. whichlib completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 3 of them are readable on this page. This is what we observed, not what the docs claim.
How fast is whichlib?
It answers our handshake in 192 ms on average, which is faster than 64% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.
How many people use whichlib?
The npm package whichlib was installed 287 times in the last week. Week over week that is +562%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is whichlib open source?
Yes — it is published under the MIT licence, written in JavaScript, 0 stars on GitHub and 1 open issue. The source link is on this page, so you can read exactly what it does with your data before you connect it.