mcpField
D
dep

dep

Local
github.com/rog0xDeveloper Tools0Updated 32w ago
Repository

About dep

dep is an MCP server for analyzing dependencies in npm projects, aimed at AI agents and assistants. It brings license, update, dependency-tree, bundle-size, and vulnerability checks together, using a project directory with package.json as input.

Key features

  1. 01Identify dependency licenses and compatibility issues
  2. 02Find outdated packages and classify updates
  3. 03Inspect transitive dependency trees and cycles
  4. 04Estimate production bundle sizes
  5. 05Audit vulnerabilities and show fixes

Use cases

  1. 01Review dependency licenses before release
  2. 02Plan package updates by version category
  3. 03Understand transitive dependencies in a project
  4. 04Check bundle-size estimates or audit vulnerabilities

MCP support

Exposes npm dependency analysis and security audit tools to MCP clients; each tool accepts a project directory containing package.json.

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

mcp.json · Universal config
{
  "mcpServers": {
    "rog0x-dep": {
      "command": "npx",
      "args": [
        "-y",
        "@rog0x/mcp-dep-tools"
      ]
    }
  }
}
Run commandnpx -y @rog0x/mcp-dep-tools

Local servers need a runtime on your machine (e.g. Node.js 18+). Config file locations differ by client; see your client’s docs.

Packages
npm@rog0x/mcp-dep-tools1.0.1

Tools

5

Saved tool list · updated 2w ago

ParameterTypeRequiredDescription
project_dirstringYesAbsolute path to the project directory containing package.json

Details

From the project README

mcp-dep-tools

MCP server providing dependency and package management tools for AI agents. Analyze licenses, find outdated packages, visualize dependency trees, estimate bundle sizes, and audit security vulnerabilities — all from your AI assistant.

Tools

dep_check_licenses

Analyze licenses of all dependencies in a project. Lists each dependency's license type, flags copyleft (GPL) and unknown licenses, and checks for compatibility issues.

dep_find_outdated

Check which dependencies are outdated. Compares installed or specified versions against the latest on npm, categorizes updates as major/minor/patch, and shows how many days since the latest version was published.

dep_analyze_tree

Build and display the dependency tree. Shows direct dependencies and their transitive sub-dependencies, calculates maximum depth, detects circular dependencies, and counts total transitive packages.

dep_analyze_size

Estimate total bundle size from package.json without installing node_modules. Queries the Bundlephobia API for each production dependency to get minified and gzipped sizes.

dep_security_audit

Check dependencies for known security vulnerabilities. Runs npm audit when a lockfile is present, otherwise queries the npm registry advisory API directly. Reports severity levels, affected version ranges, and fix recommendations.

Setup

npm install
npm run build

Usage with Claude Desktop

Add to your Claude Desktop config:

{
  "mcpServers": {
    "dep-tools": {
      "command": "node",
      "args": ["path/to/mcp-dep-tools/dist/index.js"]
    }
  }
}

All tools accept a single parameter

  • project_dir (string, required): Absolute path to the project directory containing a package.json.

License

MIT

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.