About freshdeps-mcp
freshdeps-mcp is an MCP server for coding agents that checks npm and PyPI packages against live dependency-health data before they are recommended.
Key features
- 01npm and PyPI package checks
- 02Maintenance status and release age
- 03Deprecation and archive flags
- 04Known CVE count from OSV
- 05Verified alternative for abandoned packages
Use cases
- 01Checking a package before suggesting it in code
- 02Reviewing maintenance health of a dependency
- 03Finding known vulnerabilities in a package
MCP support
Exposes the `check_dependency_freshness` tool to MCP clients, returning a readable verdict and structured dependency-health fields.
Configuration
Local server config is the same for every client. Copy it into your client’s MCP config file.
We haven’t collected a package or remote endpoint for this server. Follow the instructions in the project README.
Tools
Local servers expose tools only once running on your machine, and the maintainer has not provided a tool list.
Details
From the project READMEfreshdeps-mcp
MCP server exposing live npm / PyPI dependency-health verdicts so AI coding agents can check a package before recommending it — closing the 6–18 month staleness gap in model training data.
Tool
check_dependency_freshness
| Input | Type |
|---|---|
ecosystem | "npm" | "pypi" |
package | string |
Returns a concise human-readable summary and structured content:
maintenance signal (active/slowing/stale/abandoned/unknown),
latest version, last release/commit age, deprecation/yank/archived flags,
known CVE count (OSV), and a hand-verified alternative if the package is
dead.
It calls ${FRESHDEPS_API_BASE}/api/verdict (default
https://freshdeps.vercel.app).
Install (Claude Desktop / Cursor)
Once published:
{
"mcpServers": {
"freshdeps": { "command": "npx", "args": ["-y", "freshdeps-mcp"] }
}
}
From this repo (before publish):
{
"mcpServers": {
"freshdeps": {
"command": "node",
"args": ["/absolute/path/to/code/mcp/server.js"]
}
}
}
Run / test manually
npm install
FRESHDEPS_API_BASE=http://localhost:3100 node server.js
The server speaks JSON-RPC over stdio (StdioServerTransport).
Env
| Var | Purpose |
|---|---|
FRESHDEPS_API_BASE | backend base URL (default prod) |
GOATCOUNTER_CODE | optional fire-and-forget usage analytics |
Comments
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.