mcpField
M
MCP Server for NPM Package Info

MCP Server for NPM Package Info

Local
github.com/snyk-labsSecurity8Updated 32w ago
Repository

About MCP Server for NPM Package Info

An MCP server that returns structured information about npm packages. It is intended for IDE integrations and AI agents, and is explicitly designed as an intentionally vulnerable security-learning tool.

Key features

  1. 01Look up npm package information
  2. 02Return structured package data
  3. 03Use Streamable HTTP transport
  4. 04Manage stateful sessions

Use cases

  1. 01Retrieve package details from an IDE integration
  2. 02Look up npm package data through an AI agent
  3. 03Study MCP server security using an intentionally vulnerable project

MCP support

Exposes the `getNpmPackageInfo` tool over MCP using Streamable HTTP, with session management for stateful connections.

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

No install method listed yet

We haven’t collected a package or remote endpoint for this server. Follow the instructions in the project README.

Repository

Tools

No tool list yet

Local servers expose tools only once running on your machine, and the maintainer has not provided a tool list.

Details

From the project README

MCP Server for NPM Package Info

A Model Context Protocol server that provides a tool to fetch npm package information.

Security Disclaimer: this repository is intentionally vulnerable, intended to be used as an educational tool for MCP Server security.

How to use the MCP Server

Define the MCP Server in your Agent MCP configuration, as follows:

{
    "servers": {
        "npm-and-node-tools": {
            "type": "http",
            "url": "http://localhost:3500/mcp"
        }
    },
    "inputs": []
}

Features

  • Exposes a getNpmPackageInfo tool using MCP
  • Uses HTTP (Streamable HTTP) transport for remote connections
  • Returns structured package information
  • Supports session management for stateful connections

Installation

npm install

Usage

Start the server:

npm start

The server will start listening on port 3000 by default. You can customize the port by setting the PORT environment variable:

PORT=3500 npm start

This server is designed to be used with IDE integrations and AI agents that support the Model Context Protocol over HTTP.

Tool: getNpmPackageInfo

Parameters:

  • packageName (string): The name of the npm package to look up

Returns:

  • packageInfo (object): JSON object containing all available information about the package

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.