About Package Intel MCP
Package Intel MCP gives AI agents package metadata and supply-chain signals for npm, PyPI and crates.io packages. It combines registry information with deps.dev dependency and health data, without API keys.
Key features
- 01Package metadata and latest versions
- 02Release history and dates
- 03Download counts
- 04Direct dependency lookup
- 05Health signals from deps.dev
- 06Keyword package search
Use cases
- 01Vet a dependency before installation
- 02Compare package release histories
- 03Check popularity and maintenance signals
- 04Find packages across supported ecosystems
MCP support
An MCP server exposing tools to search and inspect npm, PyPI and crates.io packages, with dependency and health signals from deps.dev. MCP clients connect over HTTP without an API key.
Configuration
Remote servers need no local install. Pick your client, then copy the config or install in one click.
https://package.selflabbs.com/mcpclaude mcp add --transport http selflabbs-package-intel https://package.selflabbs.com/mcp{"mcpServers":{"selflabbs-package-intel":{"type":"http","url":"https://package.selflabbs.com/mcp"}}}Open in Cursor{"servers":{"selflabbs-package-intel":{"type":"http","url":"https://package.selflabbs.com/mcp"}}}Open in VS Code{"mcpServers":{"selflabbs-package-intel":{"type":"http","url":"https://package.selflabbs.com/mcp"}}}{"mcpServers":{"selflabbs-package-intel":{"serverUrl":"https://package.selflabbs.com/mcp"}}}Run commands in a terminal; paste JSON into the client’s MCP config and restart. Servers that need sign-in will prompt on first connect.
Tools
Details
From the project READMEPackage Intel MCP — by Datakoot
Software supply-chain intelligence for AI agents — as MCP tools your agent can call mid-task, so it can vet a dependency before it installs it. Covers npm, PyPI and crates.io. No API keys.
Tools
| Tool | What it does | Source |
|---|---|---|
package_info | Metadata for a package: description, latest version, license, homepage & repo links | npm / PyPI / crates.io |
package_versions | Full version history with release dates | npm / PyPI / crates.io |
package_downloads | Download counts and popularity signal | npm / PyPI / crates.io |
package_dependencies | Direct dependencies for a given version | deps.dev |
package_health | Health signals: OpenSSF Scorecard, stars, dependents | deps.dev |
package_search | Search for packages by keyword | npm / PyPI / crates.io |
Every tool accepts an ecosystem of npm, pypi, or crates. No API keys required.
Quick start
claude mcp add --transport http package-intel https://package.datakoot.com/mcp
Or point any MCP client at https://package.datakoot.com/mcp.
Try it in 10 seconds — no key, no signup
Paste this into a terminal:
curl -s https://package.datakoot.com/mcp \
-H 'content-type: application/json' \
-H 'accept: application/json, text/event-stream' \
-d '{"jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": {"name": "package_health", "arguments": {"ecosystem": "npm", "name": "express"}}}'
You get a supply-chain health snapshot for the npm package express — versions, downloads, dependencies, maintenance signals — no API key, nothing to sign up for.
Or point any MCP client at the URL and just ask your agent, in plain language:
- "How healthy is the npm package
express?" - "Before I add
left-pad, is it actively maintained and widely used?"
Data & attribution
Data comes from the public registry APIs for npm, PyPI and crates.io, plus deps.dev (Google Open Source Insights, CC-BY 4.0) for dependency graphs and OpenSSF Scorecard health signals. Package data is served from official public APIs and is informational.
Part of Datakoot — keyless intelligence APIs for AI agents.
Comments
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.