Skip to content
mcp/harbor
Verified official

DepScout MCP

v1.0.0

io.github.yc-droid/depscout

Scan packages and lockfiles (npm, PyPI, Go, Maven, Cargo, NuGet) for vulnerabilities and malware.

transport:streamable-http tools:4
Website

Target client

run in your project directory 

claude mcp add --transport http depscout https://depscout.salesup.workers.dev/mcp

setup guides: Claude Code Claude Desktop Cursor VS Code Zed Windsurf Cline Gemini CLI Grok ChatGPT Claude.ai LangChain

Adds it for this project only. Append --scope user to make it available everywhere. Claude Code docs

check_package Read-only

check package

check_dependencies Read-only

check dependencies

check_lockfile Read-only

check lockfile

get_vulnerability Read-only

get vulnerability

All 4 tools, one page each

3 prompts you invoke yourself

Mutating and Read-only are read off each tool's name, not its schema — a hint, not a guarantee. Check the server's own documentation before granting access.