About npm-mcp
npm-mcp is an MCP server for developers evaluating npm packages. It combines package discovery with security, compatibility, version, bundle-size, and quality checks, and can generate quick-start examples.
Key features
- 01Search and compare npm packages
- 02Check vulnerabilities and safe versions
- 03Assess runtime and module compatibility
- 04Inspect bundle size and tree-shaking
- 05Compare versions and breaking changes
- 06Validate npx commands
Use cases
- 01Find alternatives for a dependency
- 02Check a package before installing it
- 03Review compatibility with existing dependencies
- 04Estimate a package's bundle impact
MCP support
Exposes npm registry search, package details, security, compatibility, and related analysis tools to MCP clients such as Cursor AI and Claude Desktop.
Configuration
Local server config is the same for every client. Copy it into your client’s MCP config file.
Tools
12Saved tool list · updated 2w ago
| Parameter | Type | Required | Description |
|---|---|---|---|
| limit | number | No | Maximum number of results (default: 10, max: 50) |
| query | string | Yes | Search query (package name or keywords) |
Details
From the project README
NPM MCP
Model Context Protocol server for npm registry
Search packages, check security, compare versions, and validate compatibility. Use it from Cursor AI or Claude Desktop.
Note: This is an unofficial, community-driven MCP server and is not affiliated with or endorsed by npm, Inc.
Features
- Auto-Security — AI automatically checks packages before suggesting install (no user action!)
- Capabilities Analysis — ESM/CJS, TypeScript, Platform support (Node/Browser/Deno), Build tools
- Quick Start Generator — Ready-to-use code examples for any package
- Package Comparison — Compare alternatives side-by-side (features, size, popularity)
- Bundle Size Analysis — Minified/gzipped sizes, tree-shaking, impact on your bundle
- Similar Packages — Find alternatives and similar packages
- Search — Find packages with ranking and scores
- Details — Versions, dependencies, download stats, deprecation status
- Security — Vulnerability check and safe version tips
- Compatibility — Peer dependency and version conflicts
- Quality — Maintenance and community metrics
- Version compare — Breaking changes and semver
- NPX check — Validate npx commands before running
Install & use
With npx (recommended)
No global install. Add to Cursor or Claude config:
Cursor — ~/.cursor/mcp.json:
{
"mcpServers": {
"npm-registry-mcp": {
"command": "npx",
"args": ["@alisaitteke/npm-mcp"]
}
}
}
Claude Desktop — ~/Library/Application Support/Claude/claude_desktop_config.json (macOS):
{
"mcpServers": {
"npm-registry-mcp": {
"command": "npx",
"args": ["@alisaitteke/npm-mcp"]
}
}
}
Global install (optional)
npm install -g @alisaitteke/npm-mcp
Then use "command": "npm-mcp" (no args) in the config above.
What you can ask
Once the server is connected, you can ask things like:
- “Search for React state management libraries”
- “Security audit for [email protected]”
- “Is [email protected] compatible with my current deps?”
- “Compare React 17 and 18”
- “Quality check for date-fns”
- “Is it safe to run npx create-next-app?”
License
MIT
Contributors
Ali Sait Teke Creator & Maintainer |
Thanks to everyone who helps improve this project!
Comments
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.