PkgGuard MCP server

• check_packageFree

  Checks one package version (npm, PyPI, Go, crates.io, Packagist, RubyGems, Maven, NuGet) against OSV.dev: advisory ids, severity, CVSS, fixed-in versions and malicious flags. Free tier: 30 calls/day per IP with full results, then $0.001 per call in USDC over x402 (/v1/package).

• scan_dependenciesFree

  Checks a package.json, lockfile, requirements.txt, go.mod, Cargo.lock, poetry.lock or composer.lock (or a list of packages) against OSV.dev for known vulnerabilities and confirmed-malicious packages. Returns per-package advisory ids (CVE/GHSA/MAL), severity, CVSS and fixed-in versions. Free tier: 30 calls/day per IP with full results, up to 100 packages; then $0.003 per scan (up to 500) in USDC over x402 (/v1/scan).

• Code scan7 source files scanned25/25
• Live reliabilityremote reachable in 660ms20/20
• Tool poisoning2 tool descriptions checked15/15
• Auth qualityopen endpoint, read-only tools10/15
• Maintenancerepository not readable: unknown3/15
• Maintainer identityendpoint served from the registry-verified namespace domain8/10

Safety score

81/100

higher than 70% of 1,761 Finance servers

Tools

2

the typical Finance server has 8

Tools that change things

0%

typical: 0%. Fewer write tools means less an agent can break

Uptime

100%

of our recent checks; the typical remote Finance server answers 100%

Response time

215 ms

faster than 63% of 1,133 Finance servers

Downloads a week

419

more than 90% of 421 Finance servers with a package

PkgGuard: common questions

Is PkgGuard MCP server safe?

Mostly: it is graded B (81/100). Read the PkgGuard safety report

How do I install PkgGuard?

It runs remotely at api.youraitools.co. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.

Does PkgGuard need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is PkgGuard maintained?

The latest release is v0.1.1.

Is PkgGuard up?

100% of our last 28 checks got an answer. We check remote servers about four times a day.

What can I use instead of PkgGuard?

Servers from other publishers that do the same job: Quantum Readiness Scan MCP server, WebCrypt MCP Server and Blockrun MCP server.

How does PkgGuard compare with other Finance MCP servers?

safety score 81/100 (higher than 70% of 1,761 Finance servers); tools 2 (the typical Finance server has 8); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.