Skip to main content
Glama
521,397 tools. Updated 2026-09-06 11:20

"PyPI" matching MCP tools:

Matching MCP Servers

  • F
    license
    C
    quality
    D
    maintenance
    An MCP server built with FastMCP that provides basic terminal abilities like running commands, running Python, and working with files and folders.
    9
    -
  • A
    license
    Not graded
    quality
    D
    maintenance
    A security-focused MCP server that enables AI assistants to search PyPI packages, scan for vulnerabilities, audit dependencies, and ensure security across Python projects.
    3
    MIT

Matching MCP Connectors

  • PyPI MCP — wraps the Python Package Index (PyPI) JSON API (free, no auth).

  • PyPIStats.org — PyPI download statistics

  • Check developer laptops for any installs of a PyPI package to identify potential exposure. Searches all enrolled dev machines, returning all installs or filter by versions. Complements CI checks for comprehensive malicious package incident response.
    Apache 2.0
  • Check whether a software package or infrastructure product version has known CVEs or supply chain compromises. Use this before adding, updating, or recommending dependencies.
    MIT
  • Checks monitored GitHub repositories within an organization for usage of a specified PyPI package at given versions, identifying affected CI pipelines. Use with developer machine checks for full coverage.
    Apache 2.0
  • List known security vulnerabilities for npm, PyPI, or crates.io packages. Specify an exact version to scope results, or omit it to see all advisories.
    MIT
  • Retrieve full details of a security threat incident, including compromised package names, versions, and C2 domains/IPs. After listing incidents, use this to extract concrete IOCs and determine which exposure checks to run based on the ecosystem (npm or pypi).
    Apache 2.0
  • Retrieve complete dependency graphs for npm, PyPI, or crates.io packages, including direct and transitive dependencies with versions and counts, and flagged deprecated direct dependencies.
    MIT
  • Get a consolidated snapshot of an npm, PyPI, or crates.io package: version, license, downloads, repository, and deprecation status. All key details from one call.
    MIT
  • Retrieve PyPI package details: version, summary, license, runtime dependencies, release dates, and more. Verify Python package metadata before integrating into your projects.
    MIT
  • Retrieve public details about a software package, including its description, latest version, license, repository links, homepage, and malicious status. Supported types: PyPI, npm, Maven, Golang, NuGet, Huggingface, RubyGems.
    Apache 2.0
  • Run a multi-source intelligence report by searching up to 18 platforms (HN, GitHub, npm, PyPI, X, Reddit, YouTube, and more) in parallel. Choose a focus preset—balanced (14 free APIs), trending, or comprehensive—or specify exact sources. Requires a query; returns structured JSON results.
    MIT
  • Retrieve the running version of qrz-mcp and the QRZ API contract to detect drift across MCP deployments.
    GPL 3.0
  • Check the PyPI version of lotw-mcp and the ARRL LoTW schema version to detect version drift across MCP deployments.
    GPL 3.0
  • Report the running MCP server version, package path, uptime, tool count, and reload instructions. Use this to verify which Axint process your agent is connected to.
    Apache 2.0
  • Resolve fuzzy or partial package names into real, ranked candidates using live registry search for npm and Cargo, with clear guidance when PyPI search is unavailable.
    MIT