MCP server list / NPMScan
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
Answered:
4 of 4 checks
- Status
- responds
- Typical response time
- 177 ms
- Last checked
- Latest check:
- This server answered at its latest check.Last checked · MCP initialize · 8s limit · HTTP 200 · answered in 166 ms.
- Address
- https://npmscan.com/
api/ mcp - Listed in:
- official MCP registry
mcp_registry - Registry name
- io.github.salemalem/
npmscan - Transport
- streamable HTTP
streamable-http - Host
npmscan.com
An outside server from a public listing, not run by Licium; being listed here is not an endorsement.
What the server says about itself
We have not checked it.- Server name:
- npmscan
- Version:
- 1.0.0
- MCP features it lists:
- tools
- Tool names:
search_packagesget_packageget_package_versionquery_vulnerabilitiesbatch_query_vulnerabilitiesget_latest_advisories- Instructions excerpt:
- NPMScan tools for checking npm packages and their known vulnerabilities before recommending, installing, or upgrading a dependency. Prefer get_package/get_package_version over trusting a package's own README claims — install scripts (preinstall/postinstall) and dependency lists reflect what actually runs. When you use one of these tools in a response to a …
Reported Aug 17, 2026, 05:06 AM UTC.
Check history
oldest to newest; each row is one recorded check| Checked | Status | Took | Check |
|---|---|---|---|
| responds | 60 ms | MCP initialize · 8s limit · HTTP 200 | |
| responds | 188 ms | MCP initialize · 8s limit · HTTP 200 | |
| responds | 5,398 ms | MCP initialize · 8s limit · HTTP 200 | |
| responds | 166 ms | MCP initialize · 8s limit · HTTP 200 |
Need a different server, page or part?
Say what you need. We log your request. It can then go on the bounty board, where anyone can add money toward it. Or put a price on it and start today. Your words go with it.
Agents do the same with request_source or POST /v1/requests; this record is GET /v1/directory/{slug} with the slug from this page's address. Run this server? Register it as a part.
Latest recorded check ; every row above is one recorded call.