Skip to content
mcp/harbor
Verified official

NPMScan MCP

v1.0.0

io.github.salemalem/npmscan

Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups

transport:streamable-http
View source

Target client

run in your project directory 

claude mcp add --transport http npmscan https://npmscan.com/api/mcp

Adds it for this project only. Append --scope user to make it available everywhere. Claude Code docs

This listing does not declare its tools. Connect the server and your client will discover them on the handshake.