--- title: I just added an MCP server to NPMScan. | daily.dev description: NPMScan now exposes an MCP (Model Context Protocol) server endpoint, allowing AI coding agents like Claude Code and Cursor to query npm package metadata and... canonical: https://daily.dev/posts/i-just-added-an-mcp-server-to-npmscan--cw9g3eyqe twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: I just added an MCP server to NPMScan. | daily.dev og:description: NPMScan now exposes an MCP (Model Context Protocol) server endpoint, allowing AI coding agents like Claude Code and Cursor to query npm package metadata and... og:url: https://daily.dev/posts/i-just-added-an-mcp-server-to-npmscan--cw9g3eyqe og:image: https://api.daily.dev/og/posts/CW9g3eyQE.png og:image:alt: I just added an MCP server to NPMScan. og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # I just added an MCP server to NPMScan. **[Shyngys Shynbolatov](https://daily.dev/sources/qmockv3zs)** · [@shyngysdev](https://daily.dev/shyngysdev) · 1 min read · 3 upvotes · 1 comments ## Summary NPMScan now exposes an MCP (Model Context Protocol) server endpoint, allowing AI coding agents like Claude Code and Cursor to query npm package metadata and known vulnerabilities directly. No API key is required. Developers can ask their agents to check packages before installing, compare packages from a security perspective, find known vulnerabilities in dependencies, and inspect package versions, maintainers, and install scripts. ## Content AI coding agents can now query npm package information and known vulnerabilities directly from NPMScan instead of relying only on web search or outdated model knowledge. MCP endpoint: ``` https://npmscan.com/api/mcp ``` For Claude Code: ``` claude mcp add --transport http npmscan https://npmscan.com/api/mcp ``` No API key is required. You can now ask your agent things like: - Check this npm package before installing it - Compare two packages from a security perspective - Find known vulnerabilities in my dependencies - Inspect package versions, maintainers, and install scripts The goal is to make npm security checks available directly inside AI-assisted development workflows. Try it here: https://npmscan.com/docs/mcp Would appreciate any feedback from people using MCP with Claude Code, Cursor, or other coding agents. ## Similar posts on daily.dev - [Run AutoMCP To Supercharge Your AI Agent with Libraries MCP Servers](https://daily.dev/posts/run-automcp-to-supercharge-your-ai-agent-with-libraries-mcp-servers-oknsnxwjg) · Snyk · 1 upvotes · 0 comments - [Building Custom MCP Servers with Next.js and mcp-handler](https://daily.dev/posts/building-custom-mcp-servers-with-next-js-and-mcp-handler-f6ddpnmik) · Trevor Lasn · 4 upvotes · 0 comments - [Introducing the MDN MCP server](https://daily.dev/posts/introducing-the-mdn-mcp-server-5lhsiuate) · MDN Blog · 134 upvotes · 1 comments - [Secret scanning with GitHub MCP Server is now generally available](https://daily.dev/posts/secret-scanning-with-github-mcp-server-is-now-generally-available-lenk8fgbw) · GitHub Changelog · 1 upvotes · 0 comments - [Building MCP Servers: Custom Context for Claude Code](https://daily.dev/posts/building-mcp-servers-custom-context-for-claude-code-iarhgi53v) · SitePoint · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#ai-agents](https://daily.dev/tags/ai-agents), [#mcp](https://daily.dev/tags/mcp), [#claude-code](https://daily.dev/tags/claude-code), [#npm](https://daily.dev/tags/npm) [View this post on daily.dev](https://daily.dev/posts/i-just-added-an-mcp-server-to-npmscan--cw9g3eyqe) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"DiscussionForumPosting","mainEntityOfPage":"https://daily.dev/posts/i-just-added-an-mcp-server-to-npmscan--cw9g3eyqe","headline":"I just added an MCP server to NPMScan.","text":"NPMScan now exposes an MCP (Model Context Protocol) server endpoint, allowing AI coding agents like Claude Code and Cursor to query npm package metadata and known vulnerabilities directly. No API key is required. Developers can ask their agents to check packages before installing, compare packages from a security perspective, find known vulnerabilities in dependencies, and inspect package versions, maintainers, and install scripts.","url":"https://daily.dev/posts/i-just-added-an-mcp-server-to-npmscan--cw9g3eyqe","datePublished":"2026-07-28T22:51:49.757Z","dateModified":"2026-09-13T20:58:17.156Z","author":{"@type":"Person","name":"Shyngys Shynbolatov","url":"https://daily.dev/shyngysdev","image":"https://avatars.githubusercontent.com/u/42411937?v=4","description":"dev blockhacks.io npmscan.com","interactionStatistic":{"@type":"InteractionCounter","interactionType":{"@type":"EndorseAction"},"userInteractionCount":270}},"image":"https://media.daily.dev/image/upload/s--o-TtfiAE--/f_auto/v1785279110/posts/CW9g3eyQE?_a=BAMAMicg0","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":3},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":1}],"isPartOf":{"@type":"WebPage","url":"https://daily.dev/sources/qmockv3zs","name":"Shyngys Shynbolatov"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Shyngys Shynbolatov","item":"https://daily.dev/sources/qmockv3zs"},{"@type":"ListItem","position":3,"name":"I just added an MCP server to NPMScan."}]} ```