Npm MCP server

Read from the package source without running it. The installed server may list more.

• npm_bundle_size

  Estimate the bundle size of an npm package using the Bundlephobia API. Returns minified size, gzipped size, and dependency count.

• npm_compare_packages

  Compare 2 or more npm packages side by side: weekly downloads, bundle size, dependency count, last update, GitHub stars, and license.

• npm_dependency_audit

  Analyze a package.json to find outdated dependencies (compare installed vs latest), deprecated packages, and known security vulnerabilities.

• npm_package_info

  Get detailed information about an npm package: all versions, dependencies, maintainers, repository, license, size, npm score, and weekly downloads.

• npm_search

  Search the npm registry for packages by keyword. Returns name, description, version, weekly downloads, and last publish date for each result.

• Code scan21 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitylocal package, no credentials required12/15
• Maintenancelast push 190 days ago4/15
• Maintainer identityregistry namespace matches repository owner6/10

Npm: common questions

Is Npm MCP server safe?

Mostly: it is graded B (72/100). Read the Npm safety report

How do I install Npm?

It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.

Does Npm need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is Npm maintained?

The last commit was 206 days ago (2026-03-21). The latest release is v1.0.1.

What can I use instead of Npm?

Servers from other publishers that do the same job: Kody MCP server, GEO Tracker by DigestSEO MCP server and HIG Doctor MCP server. Compare all Npm alternatives.