analyze_transitive_dependencies — NPMScan MCP Tool
analyze_transitive_dependencies
(analyze transitive dependencies) is one of 23 tools on the
NPMScan
MCP server. Connect the server and your client discovers it on the handshake.
by client
How to call analyze_transitive_dependencies from your client
- Claude Code NPMScan analyze_transitive_dependencies run in your project directory
- Claude Desktop NPMScan analyze_transitive_dependencies ~/Library/Application Support/Claude/claude_desktop_config.json
- Cursor NPMScan analyze_transitive_dependencies ~/.cursor/mcp.json
- VS Code NPMScan analyze_transitive_dependencies .vscode/mcp.json
- Zed NPMScan analyze_transitive_dependencies ~/.config/zed/settings.json
- Windsurf NPMScan analyze_transitive_dependencies ~/.codeium/windsurf/mcp_config.json
- Cline NPMScan analyze_transitive_dependencies ~/Library/Application Support/Code/User/globalStorage/saoudrizwan.claude-dev/settings/cline_mcp_settings.json
- Gemini CLI NPMScan analyze_transitive_dependencies ~/.gemini/settings.json
- Grok NPMScan analyze_transitive_dependencies .mcp.json (in your project root)
- ChatGPT NPMScan analyze_transitive_dependencies Settings → Connectors → Advanced → Developer mode
- Claude.ai NPMScan analyze_transitive_dependencies Settings → Connectors → Add custom connector
- LangChain NPMScan analyze_transitive_dependencies pip install langchain-mcp-adapters
Fastest route
claude mcp add --transport http npmscan https://npmscan.com/api/mcp
Other tools on this server
- search_packages
- get_package
- get_package_version
- get_maintainer_profile
- query_vulnerabilities
- batch_query_vulnerabilities
- get_latest_advisories
- get_cve
- analyze_install_script
- check_package_provenance
- check_maintainer_changes
- check_maintainer_blast_radius
- check_license_compliance
- diff_dependencies
- prioritize_remediation
- simulate_dependency_upgrade
- suggest_alternative
- compare_packages
- audit_github_repository
- get_remediation_playbook
- generate_sbom
- enrich_npm_audit
This list was read from the server itself, by connecting to it and calling tools/list on 24 September 2026. It is what
the server actually exposes, not what its listing claims.
Mutating and Read-only are read off each tool's name, not its schema — a hint, not a guarantee. The registry stores tool names only; connect the server for its live schemas.