Skip to content
mcp/harbor
Claude Code

pkgtruth for Claude Code

io.github.hxckya/pkgtruth

Catches hallucinated and slopsquatted npm and PyPI packages before an agent installs them.

client:Claude Code transport:stdio runtime:npm

Install pkgtruth in Claude Code

run in your project directory

Held in this page only — never stored, logged, or sent anywhere but back to your screen. 

claude mcp add pkgtruth -e PKGTRUTH_REGISTRY=<PKGTRUTH_REGISTRY> -e PKGTRUTH_DOWNLOADS_API=<PKGTRUTH_DOWNLOADS_API> -e PKGTRUTH_CACHE_DIR=<PKGTRUTH_CACHE_DIR> -e PKGTRUTH_TIMEOUT_MS=<PKGTRUTH_TIMEOUT_MS> -- npx -y pkgtruth

Adds it for this project only. Append --scope user to make it available everywhere. Claude Code docs

pkgtruth in other clients

pkgtruth MCP server