pkg-oracle — Dependency Trust Oracle for Claude Desktop
io.github.julian-martin89/pkg-oracle
Blocks typosquatted or hallucinated npm/PyPI packages before an AI agent installs them.
client:Claude Desktop
transport:streamable-http
tools:1
Install pkg-oracle — Dependency Trust Oracle in Claude Desktop
~/Library/Application Support/Claude/claude_desktop_config.json · windows: %APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": {
"pkg-oracle": {
"command": "npx",
"args": [
"-y",
"mcp-remote",
"https://mcp-snowy-dew-9447.fly.dev/mcp"
]
}
}
}Claude Desktop has no remote transport in its config file, so this bridges through mcp-remote. Restart the app after saving. Claude Desktop docs