Lockstep MCP runs on your own machine — the client starts it, so there is no endpoint to ping. 58 installs a week from npm.
Local lockfile and package-manager reproducibility analysis without dependency details. Tools...
The linked repository no longer exists on GitHub — it was deleted or made private.
Quiet is not dead — but it is worth knowing when it wakes up, or when someone else takes it over. We watch the repository and tell you either way.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add lockstep-mcp -- npx -y @mrfentmen/lockstep-mcp
{
"mcpServers": {
"lockstep-mcp": {
"command": "npx",
"args": [
"-y",
"@mrfentmen/lockstep-mcp"
]
}
}
}
[mcp_servers.lockstep-mcp]
command = "npx"
args = ["-y", "@mrfentmen/lockstep-mcp"]
{
"mcpServers": {
"lockstep-mcp": {
"command": "npx",
"args": [
"-y",
"@mrfentmen/lockstep-mcp"
]
}
}
}
{
"servers": {
"lockstep-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@mrfentmen/lockstep-mcp"
]
}
}
}
Summarize local dependency manifest and lockfile drift without returning package names,...
Local explanation of reproducibility signals and toolchain contradictions without exact versions...
Local build artifact size and dependency weight inspection without file content output. Tools...
npm registry MCP server — package intelligence, security audits, dependency analysis
Local aggregate test-history stability analysis without test names or raw result contents. Tools...
Dependency graph and blast-radius analysis for local TypeScript/JavaScript repos.
Repo analysis for coding agents with ranked files, dependency maps, and task-scoped context.
Summarize local license evidence and uncertainty without returning package names, license text,...
Answers built from our own checks of this server.