PkgGuard MCP Server

by youraitools Your server? Claim it

answering

PkgGuard is answering right now. Last checked 6 min ago. 419 installs a week from npm. It exposes 2 tools.

Dependency scan for agents: known CVEs and malicious packages via OSV.dev. By Crypto Money Maker

Installs per day peak 419 · avg 13

a month agotoday

Uptime history 70 hours of history

70 hours agonow

100.0%

Uptime 24h

91 of 91 checks

Tools

read from the server

82 ms

Response time

average over 24h

419

Installs / week

npm and PyPI

What changed 2

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 23 October 2026. No other catalogue keeps this.

23 Oct 2 tool descriptions were rewritten check_package, scan_dependencies

Nothing serious here today

Today is the operative word: we check PkgGuard every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 6 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add pkgguard --transport http https://api.youraitools.co/pkgguard/mcp

Settings → Connectors → Add custom connector, then paste this address

https://api.youraitools.co/pkgguard/mcp

~/.codex/config.toml

[mcp_servers.pkgguard]
url = "https://api.youraitools.co/pkgguard/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "pkgguard": {
      "url": "https://api.youraitools.co/pkgguard/mcp"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "pkgguard": {
      "type": "http",
      "url": "https://api.youraitools.co/pkgguard/mcp"
    }
  }
}

Available tools 2

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

package

check_package

Checks one package version (npm, PyPI, Go, crates.io, Packagist, RubyGems, Maven, NuGet) against OSV.dev: advisory ids, severity, CVSS, fixed-in versions and malicious flags. Free tier: 30 calls/day per IP with full results, then $0.001 per call in USDC over x402 (/v1/package).

scan

scan_dependencies

Checks a package.json, lockfile, requirements.txt, go.mod, Cargo.lock, poetry.lock or composer.lock (or a list of packages) against OSV.dev for known vulnerabilities and confirmed-malicious packages. Returns per-package advisory ids (CVE/GHSA/MAL), severity, CVSS and fixed-in versions. Free tier: 30 calls/day per IP with full results, up to 100 packages; then $0.003 per scan (up to 500) in USDC over x402 (/v1/scan).

Endpoints

URL	Transport	State	Latency	Checked
https://api.youraitools.co/pkgguard/mcp	streamable-http	answering	97 ms	6 min ago

Alternatives to PkgGuard

same job, measured the same way

PayGuard

by youraitools

OFAC SDN sanctions screen for crypto addresses, for agents that send payments. By Crypto Money Maker

2 tools answering

AgentReady

by youraitools

Is your website ready for AI agents? 0-100 score, A-F grade and fixes. By Crypto Money Maker

167 installs/wk 1 tools answering

DomainCheck

by youraitools

Domain and email trust checks for agents: DNS, SPF/DMARC, disposable email. By Crypto Money Maker

2 tools answering

AgentBank

by useagentbank

Crypto banking services for AI agents: collect money and pay bank accounts in local currency.

answering

SignCheck

by youraitools

Pre-sign safety check for agent wallets: tx, EIP-712, EIP-7702, x402. By Crypto Money Maker

359 installs/wk 1 tools answering

WebRead

by youraitools

Turn any public web page into clean Markdown for LLMs; respects robots.txt. By Crypto Money Maker

1 tools answering

Boo X402 MCP

by lucle87

Pay-per-call crypto data for AI agents. USDC on Base via x402. No API key.

18 installs/wk local only

Boo Mpp MCP

by lucle87

Pay-per-call crypto data for AI agents. USDC.e on Tempo via MPP. No API key.

19 installs/wk local only

PkgGuard — questions

Answers built from our own checks of this server.

What can PkgGuard do?

It exposes 2 tools, read directly from the server on our last check. Among them: check_package, scan_dependencies. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is PkgGuard working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 82 ms. The bar chart above shows every period we have measured.

How do I connect PkgGuard?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does PkgGuard need an API key?

No. PkgGuard completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 2 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is PkgGuard?

It answers our handshake in 82 ms on average, which is faster than 97% of all working MCP servers we measure. That puts it in the quick quarter of the ecosystem. The comparison comes from our own checks across the whole registry, every 15 minutes.

How many people use PkgGuard?

The npm package @agentgate-builder/pkgguard was installed 419 times in the last week. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.