Skip to main content
Glama
niradler

Dependency MCP Server

by niradler

Dependency MCP Server

A Model Context Protocol (MCP) server for checking package versions across multiple package managers and registries.

Features

  • Multi-language support: Check packages from NPM, PyPI, Maven, NuGet, RubyGems, Crates.io, and Go modules

  • Latest version lookup: Get the most recent version of any package

  • Version existence check: Verify if a specific version exists

  • Package information: Get detailed package metadata including all versions

  • Batch processing: Check multiple packages simultaneously for improved efficiency

  • Easy installation: Install and run via npx

Related MCP server: MCP Package Hero

Supported Package Managers

  • npm - Node.js packages

  • pypi - Python packages

  • maven - Java packages (format: groupId:artifactId)

  • nuget - .NET packages

  • rubygems - Ruby gems

  • crates - Rust crates

  • go - Go modules

Installation

Global Installation

npm install -g dependency-mcp

Run with npx (no installation needed)

npx dependency-mcp

Local Development

git clone <repository>
cd dependency-mcp
npm install
npm start

Usage

The server runs as an MCP server using stdio transport. It's designed to be used with MCP-compatible clients.

Available Tools

Single Package Tools

Use these tools when you need to check 1-2 packages or require detailed information:

1. get_latest_version

Get the latest version of a package. Use for dependency updates, version checks, or when you need the most recent stable release.

Parameters:

  • package_name (string): Name of the package

  • registry (string): Package registry (npm, pypi, maven, nuget, rubygems, crates, go)

Example:

{
  "package_name": "express",
  "registry": "npm"
}

2. check_version_exists

Check if a specific version exists. Use for dependency validation, CI/CD checks, or ensuring version compatibility.

Parameters:

  • package_name (string): Name of the package

  • version (string): Version to check

  • registry (string): Package registry

Example:

{
  "package_name": "flask",
  "version": "2.3.0",
  "registry": "pypi"
}

3. get_package_info

Get detailed package information including all versions. Use for dependency audits, security reviews, or when you need comprehensive package metadata.

Parameters:

  • package_name (string): Name of the package

  • registry (string): Package registry

Example:

{
  "package_name": "lodash",
  "registry": "npm"
}

Multi-Package Tools

Use these tools when you need to check 3+ packages or perform bulk operations:

4. get_latest_versions

Get latest versions for multiple packages simultaneously. Use when checking 3+ dependencies - processes up to 100 packages in parallel.

Parameters:

  • packages (array): Array of package names

  • registry (string): Package registry

Example:

{
  "packages": ["react", "lodash", "axios"],
  "registry": "npm"
}

5. check_versions_exist

Check if specific versions exist for multiple packages. Use for bulk dependency validation, CI/CD pipeline checks, or ensuring multiple package version compatibility.

Parameters:

  • packages (array): Array of package objects with package_name and version

  • registry (string): Package registry

Example:

{
  "packages": [
    { "package_name": "react", "version": "18.2.0" },
    { "package_name": "lodash", "version": "4.17.21" },
    { "package_name": "axios", "version": "1.6.0" }
  ],
  "registry": "npm"
}

6. get_packages_info

Get comprehensive package details for multiple packages. Use for dependency audits, security reviews, or bulk package analysis.

Parameters:

  • packages (array): Array of package names

  • registry (string): Package registry

Example:

{
  "packages": ["react", "lodash", "axios"],
  "registry": "npm"
}

Tool Selection Guide

When to Use Single Package Tools:

  • 1-2 packages to check

  • Detailed information needed (versions, homepage, repository)

  • Specific version validation for one package

  • Quick checks during development

When to Use Multi-Package Tools:

  • 3+ packages to check

  • Bulk dependency validation

  • CI/CD pipeline checks

  • Dependency audits or security reviews

  • Performance-critical scenarios with multiple packages

Performance Notes:

  • Single package tools: Faster for 1-2 packages

  • Multi-package tools: 3-5x faster for 5+ packages due to parallel processing

  • Error isolation: Failed packages don't break the entire batch

  • Batch limits: Maximum 100 packages per request

Batch Processing

The multi-package tools provide significant performance improvements when checking multiple packages:

Benefits

  • Eliminates round-trip delays: Check up to 100 packages in a single request

  • Consistent error handling: Individual package failures don't break the entire batch

  • Parallel processing: All packages are checked concurrently for maximum efficiency

  • Reduced API overhead: Fewer HTTP requests to external registries

Limitations

  • Maximum batch size: 100 packages per request

  • Rate limiting: Built-in delays prevent overwhelming external APIs

  • Timeout handling: 10-second timeout per request with graceful fallback

  • Memory usage: Large batches may consume more memory

When to Use Batch Tools

  • Dependency audits: Check multiple packages in your project

  • Version comparisons: Compare versions across multiple packages

  • Bulk updates: Identify which packages have newer versions available

  • CI/CD pipelines: Validate multiple package versions simultaneously

Production Considerations

Performance

  • Concurrent processing: Multi-package tools use Promise.all for parallel execution

  • Rate limiting: Built-in 100ms delay between requests to external APIs

  • Timeout handling: 10-second timeout with graceful error handling

  • Memory management: Efficient processing of large batches

Reliability

  • Error isolation: Individual package failures don't affect others in the batch

  • Network resilience: Handles temporary network issues gracefully

  • API fallbacks: Graceful degradation when external APIs are unavailable

  • Validation: Comprehensive input validation prevents invalid requests

  • Registry-specific handling: Maven registry may be slower in some network environments

Security

  • Input sanitization: All inputs are validated and sanitized

  • Rate limiting: Prevents abuse of external APIs

  • Error messages: Safe error messages that don't expose internal details

  • Timeout protection: Prevents hanging requests

Monitoring

  • Timestamps: All responses include ISO timestamps for tracking

  • Error tracking: Detailed error information for debugging

  • Performance metrics: Built-in timeout and rate limiting tracking

Configuration with Claude Desktop

Add this to your Claude Desktop configuration file:

Windows

%APPDATA%\Claude\claude_desktop_config.json

macOS

~/Library/Application Support/Claude/claude_desktop_config.json

Linux

~/.config/claude/claude_desktop_config.json

{
  "mcpServers": {
    "dependency-checker": {
      "command": "npx",
      "args": ["dependency-mcp"]
    }
  }
}

Example Responses

Latest Version Response

{
  "package": "express",
  "registry": "npm",
  "found": true,
  "latest_version": "4.18.2",
  "description": "Fast, unopinionated, minimalist web framework"
}

Version Check Response

{
  "package": "flask",
  "version": "2.3.0",
  "registry": "pypi",
  "exists": true
}

Package Info Response

{
  "package": "lodash",
  "registry": "npm",
  "found": true,
  "latest_version": "4.17.21",
  "description": "Lodash modular utilities.",
  "versions": ["4.17.21", "4.17.20", "..."],
  "homepage": "https://lodash.com/",
  "repository": "git+https://github.com/lodash/lodash.git"
}

Special Format Notes

Maven

Maven packages should be specified in the format groupId:artifactId:

{
  "package_name": "org.springframework:spring-core",
  "registry": "maven"
}

Go Modules

Go modules should use the full module path:

{
  "package_name": "github.com/gorilla/mux",
  "registry": "go"
}

Error Handling

The server provides detailed error messages for common scenarios:

  • Package not found

  • Network connectivity issues

  • Invalid package name formats

  • Registry API errors

  • Rate limiting exceeded

  • Server errors (5xx responses)

  • Request timeouts

  • Input validation errors

Error Response Format

All error responses include:

  • error: Human-readable error message

  • timestamp: ISO timestamp of when the error occurred

  • package: Package name that caused the error

  • registry: Registry where the error occurred

Input Validation

The server validates all inputs:

  • Package names: Must be non-empty strings under 500 characters

  • Versions: Must be non-empty strings under 100 characters

  • Registry: Must be one of the supported registries

  • Batch size: Maximum 100 packages per request

  • Required parameters: All required fields must be present

Response Expectations

Single Package Tools:

  • Success: Returns complete package information with found: true

  • Not Found: Returns found: false with error message

  • Network Issues: Returns error with descriptive message

  • Always includes: timestamp, package, registry fields

Multi-Package Tools:

  • Success: Returns array of results, each with individual status

  • Partial Success: Some packages succeed, others fail - each has individual result

  • Error Isolation: Failed packages don't affect successful ones

  • Batch Processing: All packages processed in parallel for efficiency

  • Consistent Format: Each result follows same structure as single package tools

Development

Project Structure

dependency-mcp/
├── src/
│   ├── index.js          # Main MCP server
│   └── packageChecker.js # Package registry handlers
├── test/
│   └── test.js          # Basic tests
├── package.json
└── README.md

Running Tests

npm test

Debug Mode

npm run dev

License

MIT

Available Tools

6 tools
check_version_existsA

Check if a specific version exists. Use for dependency validation, CI/CD checks, or ensuring version compatibility. Returns whether the version exists with package details and timestamp.

ParametersJSON Schema
NameRequiredDescriptionDefault
versionYesVersion to check for existence
registryYesPackage registry/manager to check
package_nameYesName of the package to check

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden. It discloses the primary behavior: the tool returns whether the version exists along with package details and timestamp. The verb 'check' implies read-only operation, though it does not explicitly state side-effect-freeness or auth requirements, which are unlikely to be a concern for this type of lookup.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences long and delivers the core purpose, and then direct use cases, and the return outcome. Every sentence contributes value without redundancy or filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers the tool's purpose, usage scenarios, and what the caller receives. The schema is complete with all parameters described. It does not differentiate from check_versions_exist explicitly, but the simple nature of the tool means the description is sufficiently complete for an agent to invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema covers 100% of parameters with descriptions, so the tool description adds little extra meaning. The phrase 'specific version' aligns with package_name and version but does not enrich understanding beyond what the schema already provides. This is the baseline for full schema coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with 'Check if a specific version exists,' which clearly identifies the action (checking) and resource (version existence). The word 'specific' distinguishes it from sibling tools like check_versions_exist, and it does not confuse with get_package_info or get_latest_version.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It explicitly states 'Use for dependency validation, CI/CD checks, or ensuring version compatibility,' giving clear context for when to invoke the tool. It does not mention alternatives or exclusions, but the use cases are specific enough to guide the agent.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

check_versions_existA

Check if specific versions exist for multiple packages. Use for bulk dependency validation, CI/CD pipeline checks, or ensuring multiple package version compatibility. Processes up to 100 packages in parallel with individual error handling.

ParametersJSON Schema
NameRequiredDescriptionDefault
packagesYesArray of package objects with name and version
registryYesPackage registry/manager to check

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description discloses important behavioral traits: parallel processing, a limit of 100 packages, and individual error handling. This adds meaningful context beyond the name and schema, though it does not mention return format or read-only confirmation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with purpose, then usage examples, then behavior. Every sentence earns its place with zero fluff or redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple check tool with two well-documented parameters and no output schema, the description covers purpose, use cases, and key behavioral constraints. It is complete enough for an agent to select and invoke correctly. A minor gap is the lack of return value description, but this is not essential for a boolean-like existence check.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema already describes both parameters thoroughly (100% coverage). The description adds value by explaining the batch nature ('multiple packages', 'up to 100 packages') and the parallel processing, which gives practical meaning to the 'packages' parameter without contradicting the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb ('Check'), resource ('specific versions for multiple packages'), and scope (bulk), distinguishing it from singular sibling tools. It also adds use cases like 'bulk dependency validation' and 'CI/CD pipeline checks', leaving no ambiguity.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit use cases are given ('bulk dependency validation, CI/CD pipeline checks, or ensuring multiple package version compatibility'). It does not explicitly name alternatives or when not to use, but the 'multiple packages' scope versus siblings like check_version_exists implies a clear contrast.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_latest_versionA

Get the latest version of a package. Use for dependency updates, version checks, or when you need the most recent stable release. Returns package name, latest version, description, and timestamp.

ParametersJSON Schema
NameRequiredDescriptionDefault
registryYesPackage registry/manager to check
package_nameYesName of the package to check

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Since no annotations are provided, the description must carry the full burden of behavioral disclosure. It does disclose what is returned ('Returns package name, latest version, description, and timestamp'), which is useful. However, it does not explicitly state that this is a read-only operation, mention failure modes, or address prerequisites, leaving gaps in transparency.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two well-structured sentences. The first sentence states the core purpose, and the second sentence gives both usage guidance and return information. Every word earns its place, with no fluff or redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool is low-complexity (2 parameters, no output schema), and the description covers the essential aspects: what it does, when to use it, and what it returns. It could be more complete by explicitly noting that it handles only a single package (vs. a batch tool) or by describing registry-specific behavior, but these are minor gaps given the simplicity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema has 100% description coverage for both parameters, so the baseline is 3. The description does not add any parameter-specific semantics beyond what the schema already provides, such as the enum choices for registry or the meaning of package_name. It adds no extra value here.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's action and resource: 'Get the latest version of a package.' This is a specific verb+resource pair that is easily distinguished from siblings like check_version_exists or get_package_info. The added mention of return values further clarifies its scope.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides explicit usage context: 'Use for dependency updates, version checks, or when you need the most recent stable release.' However, it does not name alternatives or exclusions (e.g., when to use get_latest_versions instead), so it lacks the explicit when-not guidance of a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_latest_versionsA

Get latest versions for multiple packages simultaneously. Use when checking 3+ dependencies - processes up to 100 packages in parallel. Returns individual results for each package with error isolation. Much faster than individual calls for multiple packages.

ParametersJSON Schema
NameRequiredDescriptionDefault
packagesYesArray of package names to check
registryYesPackage registry/manager to check

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the burden of disclosing behavior. It adds valuable context: parallel processing of up to 100 packages, individual results per package, and error isolation. These details hint at fault tolerance and performance characteristics, which are not visible in the schema. It stops short of specifying rate limits or exact return structure, but for a read-only check tool, this is adequate.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three concise sentences, each earning its place. The first states the core purpose, the second gives a usage rule and limit, and the third describes behavior and benefit. It is front-loaded with the main idea and contains no redundant filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's simplicity (two well-documented params, no output schema, no annotations), the description covers the essential aspects: purpose, when to use, behavioral traits, and performance rationale. It does not describe the exact return format, but the 'individual results for each package' hint and the context of sibling tools like get_latest_version make the tool's output predictable enough. A slightly richer description of error handling would push it to a 5.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%: both parameters (packages and registry) have descriptions and the registry has an enum. The description adds context about batch usage and parallelism, but does not add syntax or format details beyond what the schema already provides. This is the baseline for well-documented schemas.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: 'Get latest versions for multiple packages simultaneously.' This clearly distinguishes it from siblings like get_latest_version (singular) and check_version_exists by emphasizing the plural, batch nature. The intent is unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides explicit usage context with a quantitative threshold: 'Use when checking 3+ dependencies' and a capability limit: 'processes up to 100 packages in parallel.' It also justifies why to use it ('Much faster than individual calls'), though it does not explicitly name the alternative tool or mention when NOT to use it. This is clear guidance, but not fully exhaustive.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_package_infoA

Get detailed package information including all versions. Use for dependency audits, security reviews, or when you need comprehensive package metadata. Returns versions list, homepage, repository, and full package details.

ParametersJSON Schema
NameRequiredDescriptionDefault
registryYesPackage registry/manager to check
package_nameYesName of the package to get info for

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description does most of the work. It discloses the return behavior ('Returns versions list, homepage, repository, and full package details') but doesn't cover other behavioral aspects like rate limits, authorization, or whether results are cached. For a read-only 'get' tool, this is adequate but not exceptional.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, no filler. The first sentence states purpose, the second adds use cases and return details. Fully front-loaded and every word earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only package info tool, the description covers what, when, and what comes back. The lack of an output schema is acceptable given the description explicitly lists the key fields. It doesn't explain how to handle errors or edge cases, but those aren't essential for this simple tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so parameters are already well-documented. The description adds no additional semantics beyond what's in the schema, making the baseline 3 appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Get detailed package information including all versions' with a specific verb and resource. It explicitly differentiates from siblings like get_latest_version and check_version_exists by emphasizing comprehensive metadata and all versions.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides explicit use cases: 'Use for dependency audits, security reviews, or when you need comprehensive package metadata.' It does not mention when not to use or alternatives, but the context is clear enough to distinguish this from simpler sibling tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_packages_infoA

Get comprehensive package details for multiple packages. Use for dependency audits, security reviews, or bulk package analysis. Processes up to 100 packages in parallel. Returns detailed info for each package with error isolation - failed packages don't break the batch.

ParametersJSON Schema
NameRequiredDescriptionDefault
packagesYesArray of package names to get info for
registryYesPackage registry/manager to check

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the burden and discloses key behaviors: 'Processes up to 100 packages in parallel' and 'error isolation - failed packages don't break the batch.' This adds significant operational context, though it omits authentication or return format details.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, each earning its place: purpose, usage guidance, and operational limits. No fluff or redundancy, and the first sentence immediately states the tool's core function.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given no output schema, the description mentions 'Returns detailed info for each package' and error isolation, but does not specify the return structure. For a batch tool of this simplicity, this is adequate; additional detail on output format or authentication would make it near-complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% for both parameters (packages array, registry enum). The description adds the parallel batch limit of 100 for the packages parameter, but beyond that it does not significantly enhance parameter semantics beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description states 'Get comprehensive package details for multiple packages' with a specific verb and resource, and the explicit 'multiple packages' distinguishes it from the sibling get_package_info tool. It also lists concrete use cases (dependency audits, security reviews, bulk package analysis), making the purpose unmistakable.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It explicitly says 'Use for dependency audits, security reviews, or bulk package analysis,' giving clear context. It does not explicitly name alternatives or when not to use, but the plural scope and sibling names imply that singular requests belong to get_package_info.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. 6 tool updatesv0.0.9
    • First observedcheck_version_exists
    • First observedcheck_versions_exist
    • First observedget_latest_version
    • First observedget_latest_versions
    • First observedget_package_info
    • First observedget_packages_info

TDQS

A4.4/5.0
Disambiguation5/5

Each tool has a clearly distinct purpose: singular operations for single packages and plural operations for batch processing. The descriptions explicitly state when to use each, eliminating ambiguity.

Naming Consistency5/5

All tool names follow a consistent verb_noun pattern, with singular and plural forms clearly distinguished. The naming convention is uniform and predictable across the entire set.

Tool Count5/5

Six tools provide a well-scoped set for dependency version checking and package information retrieval. Each tool serves a distinct need, and the count is neither too small nor excessive.

Completeness5/5

The tool surface covers the core domain of dependency version lookup and validation, including both single and batch operations. No obvious gaps exist for the stated purpose.

Maintenance

ActivityInactive
ResponsivenessSyncing

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    A
    maintenance
    A Model Context Protocol server that enables AI-powered analysis of NPM packages through multiple tools for security vulnerability scanning, dependency analysis, package comparison, and quality assessment.
    19
    1,195
    18
    TypeScript
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    A comprehensive MCP server for checking package versions and rating package quality across Python (PyPI), JavaScript/TypeScript (npm), Dart (pub.dev), and Rust (crates.io) ecosystems.
    5
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    An MCP server that queries 19 package registries (npm, PyPI, crates.io, etc.) to retrieve the latest version of packages and their metadata.
    21
    1
    MIT

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/niradler/dependency-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server