@alisaitteke/npm-mcp

NPM MCP

MCP server for npm: search packages, check security, compare versions, and validate compatibility. Use it from Cursor AI or Claude Desktop.

Features

• 🔒 Auto-Security — AI automatically checks packages before suggesting install (no user action!)
• 🎯 Capabilities Analysis — ESM/CJS, TypeScript, Platform support (Node/Browser/Deno), Build tools
• 🚀 Quick Start Generator — Ready-to-use code examples for any package
• ⚖️ Package Comparison — Compare alternatives side-by-side (features, size, popularity)
• 📦 Bundle Size Analysis — Minified/gzipped sizes, tree-shaking, impact on your bundle
• 🔍 Similar Packages — Find alternatives and similar packages
• Search — Find packages with ranking and scores
• Details — Versions, dependencies, download stats, deprecation status
• Security — Vulnerability check and safe version tips
• Compatibility — Peer dependency and version conflicts
• Quality — Maintenance and community metrics
• Version compare — Breaking changes and semver
• NPX check — Validate npx commands before running

Install & use

With npx (recommended)

No global install. Add to Cursor or Claude config:

Cursor — ~/.cursor/mcp.json:

{
  "mcpServers": {
    "npm-registry-mcp": {
      "command": "npx",
      "args": ["@alisaitteke/npm-mcp"]
    }
  }
}

Claude Desktop — ~/Library/Application Support/Claude/claude_desktop_config.json (macOS):

{
  "mcpServers": {
    "npm-registry-mcp": {
      "command": "npx",
      "args": ["@alisaitteke/npm-mcp"]
    }
  }
}

Global install (optional)

npm install -g @alisaitteke/npm-mcp

Then use "command": "npm-mcp" (no args) in the config above.

What you can ask

Once the server is connected, you can ask things like:

• “Search for React state management libraries”
• “Security audit for express@4.18”
• “Is lodash@4.17 compatible with my current deps?”
• “Compare React 17 and 18”
• “Quality check for date-fns”
• “Is it safe to run npx create-next-app?”

Links

• 🚀 Developer Productivity: PRODUCTIVITY.md — Quick start, comparison, bundle size, alternatives
• 🎯 Package Capabilities: CAPABILITIES.md — ESM/CJS, TypeScript, Platform support analysis
• 🎯 Automatic Security Checks: AUTOMATIC.md — How AI auto-checks packages (no user action needed!)
• Smart Prompts (Slash Commands): PROMPTS.md — Use /check_before_install, /find_package, /audit_project
• AI Auto-trigger Setup: AI_USAGE.md — Additional rules for .cursorrules (optional)
• Development (setup, tests, architecture): DEVELOPMENT.md
• Contributing: CONTRIBUTING.md

Files included for users

• AI_USAGE.md — Instructions for making AI automatically use MCP tools (copy rules to your project)

License

MIT

Contributors

Thanks to everyone who helps improve this project.