MCP.Market

Hex.pm MCP server

online · 100% uptime
by joshrotenberg·io.github.joshrotenberg/hexpm-mcp·v0.3.1·2 stars

MCP server for hex.pm and hexdocs.pm: search, inspect, compare, and audit Elixir packages

A91/100grade A
What users say
No reviews yet
Be the first
Safety scan
A91/100

full report

Adoption
Growing

2 stars

Reviews

Write one

Nobody has reviewed Hex.pm MCP yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Hex.pm MCP tools (24)

write = sends, deletes, buys or posts
  • alternativesFree

    Find and compare alternative packages for a given hex.pm package.

  • auditFree

    Audit a package's dependencies for risks. Checks each dependency for retired versions, stale packages, single-owner packages, and known vulnerabilities via OSV.dev.

  • audit_mix_depsFree

    Audit mix.exs dependencies for risks.

  • compareFree

    Compare 2-5 hex.pm packages side by side.

  • dep_treeFree

    Get the full transitive dependency tree for a package (BFS, max depth 5).

  • dependenciesFree

    Get dependencies for a package version.

  • doc_itemFree

    Get full documentation for a specific module or function.

  • docsFree

    Browse package documentation -- module listing.

  • downloadsFree

    Get download statistics for a hex.pm package.

  • featuresFree

    Get optional features/extras for a package release.

  • healthFree

    Comprehensive health check for a hex.pm package.

  • infoFree

    Get detailed information about a hex.pm package.

  • ownersFree

    Get owners/maintainers of a hex.pm package.

  • readmeFree

    Get the README content for a hex.pm package.

  • releaseFree

    Get detailed information about a specific package release.

  • searchFree

    Search for packages on hex.pm by name/keywords.

  • search_docsFree

    Search within a package's documentation by name.

  • toolbox_categoryFree

    List the curated projects in an Elixir Toolbox category.

  • toolbox_groupFree

    List the categories in a single Elixir Toolbox group.

  • toolbox_groupsFree

    Browse the Elixir Toolbox curated taxonomy of groups and categories.

  • toolbox_searchFree

    Search packages via Elixir Toolbox. Results carry GitHub/GitLab stats, popularity, and health signals not exposed by the raw hex.pm search.

  • toolbox_trendingFree

    List trending Elixir packages from Elixir Toolbox.

  • upgrade_checkFree

    Check which mix.exs dependencies have newer versions available.

  • versionsFree

    List all versions of a hex.pm package.

Public scan report

scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it

no findings
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 672ms20/20
  • Tool poisoning24 tool descriptions checked15/15
  • Auth qualityopen endpoint, read-only tools10/15
  • Maintenancelast push 0 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 91/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Hex.pm MCP compares

Against every graded Web search MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
91/100
higher than 88% of 3,470 Web search servers
Tools
24
the typical Web search server has 5
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Uptime
100%
of our recent checks; the typical remote Web search server answers 100%
Response time
256 ms
faster than 58% of 2,238 Web search servers
GitHub stars
2
more than 70% of 1,786 Web search servers

What its tools let an agent do: 24 read

Install Hex.pm MCP in Claude Code, Cursor or VS Code

claude mcp add --transport http hexpm-mcp https://hexpm-mcp.fly.dev/mcp
Add to Cursor

What the publisher says

From the Hex.pm MCP repository's README, as published. We do not edit it. Read it on GitHub

hexpm-mcp

MCP server for querying hex.pm and hexdocs.pm -- the Elixir/Erlang package registry and documentation hosting.

Built with snodo. It speaks MCP 2026-07-28 over stdio and Streamable HTTP, so clients need to support that revision.

It provides 24 tools, six prompts, and package resources. Tool arguments are validated against their JSON Schemas, lists come in pages of eight with cache hints, and prompt and resource arguments complete package names. The package_review prompt asks for its focus (quality, security, or upgrade) when the argument is omitted and the client supports elicitation.

Quick Start

A public instance is running at https://hexpm-mcp.fly.dev/mcp. Add it to your MCP client config (Claude Desktop, Claude Code, or any MCP client):

{
  "mcpServers": {
    "hexpm": {
      "type": "http",
      "url": "https://hexpm-mcp.fly.dev/mcp"
    }
  }
}

Installation

Three ways to get it, depending on how you want to use it.

Standalone binary (recommended)

A self-contained binary for macOS, Linux, and Windows. It bundles the Erlang runtime, so no Elixir toolchain is required.

curl -fsSL https://raw.githubusercontent.com/joshrotenberg/hexpm-mcp/main/scripts/install.sh | sh

The installer resolves the latest release, picks the asset for your OS and architecture, verifies its sha256, and installs to ~/.local/bin. It will tell you if that directory is not on your PATH.

To choose a different directory or pin a version, pass the flags through sh:

curl -fsSL https://raw.githubusercontent.com/joshrotenberg/hexpm-mcp/main/scripts/install.sh | sh -s -- --install-dir /usr/local/bin
curl -fsSL https://raw.githubusercontent.com/joshrotenberg/hexpm-mcp/main/scripts/install.sh | sh -s -- --version v0.3.6

Windows uses the PowerShell equivalent:

iex (irm https://raw.githubusercontent.com/joshrotenberg/hexpm-mcp/main/scripts/install.ps1)

Every release also attaches the archives and a combined checksums-sha256.txt if you would rather install by hand.

Verify it works:

hexpm_mcp --version

See Usage for the MCP client config, and macOS: "Apple could not verify hexpm_mcp" if Gatekeeper blocks a browser-downloaded copy.

As an Elixir library

For the public API from iex or your own code, without running an MCP server:

def deps do
  [{:hexpm_mcp, "~> 0.3"}]
end

From source

git clone https://github.com/joshrotenberg/hexpm-mcp.git
cd hexpm-mcp
mix deps.get

Features

  • 24 tools for searching, inspecting, comparing, auditing, and discovering hex.pm packages
  • 5 resources for structured package and discovery data access
  • 5 guided analysis prompts
  • HexDocs browsing (module listing, doc search, full module docs)
  • Curated package discovery via Elixir Toolbox (groups, trending, enriched search)
  • OSV.dev vulnerability checking
  • Mix.exs dependency auditing and upgrade checking
  • ETS-based response caching with configurable TTL
  • Dual transport: stdio (Claude Code/Desktop) and StreamableHTTP (remote)
  • Public Elixir API usable directly from iex

Tools

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Hex.pm MCP: common questions

Is Hex.pm MCP server safe?
Yes, by our scan: it is graded A (91/100). Read the Hex.pm MCP safety report
How do I install Hex.pm MCP?
It runs remotely at hexpm-mcp.fly.dev. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Hex.pm MCP need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Hex.pm MCP maintained?
The last commit was 39 days ago (2026-09-26). The latest release is v0.3.1.
Is Hex.pm MCP up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
What can I use instead of Hex.pm MCP?
Servers from other publishers that do the same job: Kody MCP server, GEO Tracker by DigestSEO MCP server and HIG Doctor MCP server.
How does Hex.pm MCP compare with other Web search MCP servers?
safety score 91/100 (higher than 88% of 3,470 Web search servers); tools 24 (the typical Web search server has 5); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Hex.pm MCP

Same job from other publishers: the closest match first, then the best rated.

  • Kody
    Your agents' cloud for individuals and teams. Search, execute, packages, jobs, and credentials.
    A
  • GEO Tracker by DigestSEO
    Track brand citations across seven AI search surfaces. Free OSS; optional EUR 99 client-ready audit.
    B
  • HIG Doctor
    Apple Human Interface Guidelines search, lookup, and project audits for AI coding agents.
    B
  • Apple Notes
    Inspect, search, create, edit, move, and organize notes in Apple Notes on macOS.
    A
  • Qaskills
    Search, inspect, and install 400+ QA testing skills from qaskills.sh into any MCP client.
    A