Package Registry MCP Server

A Model Context Protocol (MCP) server that enables AI assistants and agents
(Claude, Cursor, Copilot, etc.) to search package registries and retrieve
up-to-date package information.

<p align="center">
<a href="https://www.npmjs.com/package/package-registry-mcp">

</a>
<a href="https://www.npmjs.com/package/package-registry-mcp">

</a>
<a href="https://github.com/Artmann/package-registry-mcp/blob/main/LICENSE">

</a>
<a href="https://nodejs.org">

</a>
<a href="https://github.com/Artmann/package-registry-mcp">

</a>
<a href="https://archestra.ai/mcp-catalog/artmann__package-registry-mcp">

</a>
</p>

Getting Started

Cursor

Alternatively, in Cursor, you can configure MCP servers in your settings:

1. Open Cursor Settings (Cmd/Ctrl + ,)
2. Search for "MCP" or go to Extensions > MCP
3. Add a new server with:
- Name: package-registry
- Command: npx
- Args: ["package-registry-mcp"]

Claude Code

For Claude Code, run the following command in your terminal:

claude mcp add -s user package-registry npx package-registry-mcp

After configuration, you'll have access to package search and information tools.

Claude Desktop

Add this server to your Claude Desktop by adding the following to your
claude_desktop_config.json:

{
  "mcpServers": {
    "package-registry": {
      "command": "npx",
      "args": ["package-registry-mcp"]
    }
  }
}

The config file is typically located at:

- macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
- Windows: %APPDATA%\Claude\claude_desktop_config.json

After adding the configuration, restart Claude Desktop.

Features

- Search NPM packages
- Get detailed NPM package information
- Search crates.io (Rust package registry)
- Get detailed crate information
- Search NuGet packages (.NET package registry)
- Get detailed NuGet package information
- Get detailed PyPI package information (Python package registry)
- Get detailed Go module information (Go package registry)
- Search GitHub Security Advisories for vulnerabilities
- Real-time data directly from package registries

Available Tools

NPM Tools

search-npm-packages

Search the NPM registry for packages matching a query.

Parameters:

- query (string): Search term for packages
- limit (number, optional): Maximum number of results (1-100, default: 10)

Example:

bun tool search-npm-packages '{"query": "react", "limit": 5}'

get-npm-package-details

Get detailed information about a specific NPM package.

Parameters:

- name (string): Exact crate name

Example:

bun tool get-npm-package-details '{"name": "react"}'

Returns detailed information including:

- Package metadata (name, description, version, license)
- Dependencies (runtime, dev, peer)
- Maintainer information
- Repository and homepage links
- Last 50 versions (newest first)

list-npm-package-versions

List all versions of a specific NPM package.

Parameters:

- name (string): Exact crate name
- limit (number, optional): Maximum number of versions to return (1-1000,
default: 100)

Example:

bun tool list-npm-package-versions '{"name": "react", "limit": 50}'

Returns:

- Package name and total version count
- All versions sorted by release date (newest first)
- Latest version information

crates.io Tools

search-cargo-packages

Search crates.io for Rust crates matching a query.

Parameters:

- query (string): Search term for crates
- limit (number, optional): Maximum number of results (1-100, default: 10)

Example:

bun tool search-cargo-packages '{"query": "serde", "limit": 5}'

get-cargo-package-details

Get detailed information about a specific crate from crates.io.

Parameters:

- name (string): Exact crate name

Example:

bun tool get-cargo-package-details '{"name": "serde"}'

Returns detailed information including:

- Crate metadata (name, description, version, license)
- Keywords and categories
- Download statistics (total and recent)
- Features and crate size
- Repository, homepage, and documentation links
- Last 50 versions (newest first)

list-cargo-package-versions

List all versions of a specific crate from crates.io.

Parameters:

- name (string): Exact crate name
- limit (number, optional): Maximum number of versions to return (1-1000,
default: 100)

Example:

bun tool list-cargo-package-versions '{"name": "serde", "limit": 50}'

Returns:

- Crate name and total version count
- All versions sorted by release date (newest first)
- Latest and max stable version information

NuGet Tools

search-nuget-packages

Search the NuGet registry for .NET packages matching a query.

Parameters:

- query (string): Search term for packages
- limit (number, optional): Maximum number of results (1-100, default: 10)

Example:

bun tool search-nuget-packages '{"query": "newtonsoft", "limit": 5}'

get-nuget-package-details

Get detailed information about a specific NuGet package.

Parameters:

- name (string): Exact package name

Example:

bun tool get-nuget-package-details '{"name": "Newtonsoft.Json"}'

Returns detailed information including:

- Package metadata (name, description, version, license)
- Authors and project information
- Target frameworks and dependencies
- Download statistics and verification status
- Project, license, and icon URLs
- Last 50 versions (newest first)

list-nuget-package-versions

List all versions of a specific NuGet package.

Parameters:

- name (string): Exact package name
- limit (number, optional): Maximum number of versions to return (1-1000,
default: 100)

Example:

bun tool list-nuget-package-versions '{"name": "Newtonsoft.Json", "limit": 50}'

Returns:

- Package name and total version count
- All versions sorted by release date (newest first)
- Latest version information

PyPI Tools

Note: PyPI does not provide a JSON search API, so only package details and
version listing are supported. For searching, please use the PyPI website
directly at https://pypi.org/search/.

get-pypi-package-details

Get detailed information about a specific PyPI package.

Parameters:

- name (string): Exact package name

Example:

bun tool get-pypi-package-details '{"name": "requests"}'

Returns detailed information including:

- Package metadata (name, description, version, license)
- Author and maintainer information
- Dependencies and Python version requirements
- Classifiers and keywords
- Project URLs and documentation links
- Download statistics
- Vulnerability information
- Last 50 versions (newest first)

list-pypi-package-versions

List all versions of a specific PyPI package.

Parameters:

- name (string): Exact package name
- limit (number, optional): Maximum number of versions to return (1-1000,
default: 100)

Example:

bun tool list-pypi-package-versions '{"name": "django", "limit": 50}'

Returns:

- Package name and total version count
- All versions sorted by release date (newest first)
- Latest version information

Go Tools

Note: pkg.go.dev does not provide a JSON search API, so only package details and
version listing are supported. For searching, please use the pkg.go.dev website
directly at https://pkg.go.dev/search/.

get-golang-package-details

Get detailed information about a specific Go module/package.

Parameters:

- module (string): Exact module path (e.g., "github.com/gin-gonic/gin")

Example:

bun tool get-golang-package-details '{"module": "github.com/gin-gonic/gin"}'

Returns detailed information including:

- Module path and latest version
- Publication date and repository information
- VCS (version control system) details
- pkg.go.dev and go get command links
- Last 50 versions (newest first)

list-golang-package-versions

List all versions of a specific Go module/package.

Parameters:

- module (string): Exact module path
- limit (number, optional): Maximum number of versions to return (1-1000,
default: 100)

Example:

bun tool list-golang-package-versions '{"module": "github.com/gorilla/mux", "limit": 50}'

Returns:

- Module path and total version count
- All versions sorted by release date (newest first)
- Latest version information

GitHub Security Advisory Tools

search-github-advisories

Search the GitHub Security Advisory Database for vulnerabilities.

Parameters:

- ecosystem (string, optional): Filter by package ecosystem (npm, pip,
maven, nuget, go, rust, rubygems, composer, pub, swift,
erlang, actions, other)
- severity (string, optional): Filter by severity level (unknown, low,
medium, high, critical)
- type (string, optional): Filter by advisory type (reviewed, malware,
unreviewed)
- cveId (string, optional): Filter by CVE identifier
- limit (number, optional): Maximum number of results (1-100, default: 30)

Example:

bun tool search-github-advisories '{"ecosystem": "npm", "severity": "critical", "limit": 5}'

get-github-advisory

Get detailed information about a specific GitHub Security Advisory.

Parameters:

- ghsaId (string): The GHSA identifier (e.g., GHSA-grv7-fg5c-xmjg)

Example:

bun tool get-github-advisory '{"ghsaId": "GHSA-grv7-fg5c-xmjg"}'

Returns detailed information including:

- Advisory metadata (GHSA ID, CVE ID, summary, description)
- Severity and CVSS score
- Affected packages and vulnerable version ranges
- Patched versions
- CWE classifications
- References and credits

get-package-advisories

Get all security advisories affecting a specific package.

Parameters:

- ecosystem (string): The package ecosystem (npm, pip, maven, etc.)
- packageName (string): The package name (e.g., braces, lodash)
- severity (string, optional): Filter by severity level
- limit (number, optional): Maximum number of results (1-100, default: 30)

Example:

bun tool get-package-advisories '{"ecosystem": "npm", "packageName": "braces"}'

Returns:

- All known security advisories for the specified package
- Vulnerable version ranges and patched versions
- Severity ratings and CVSS scores

Installation

Install the package globally:

npm install -g package-registry-mcp

Or use directly with npx (no installation required):

npx package-registry-mcp

Contributing

See CONTRIBUTING.md for development setup and guidelines.

Requirements

- Node.js 18+ or Bun runtime
- Internet connection for package registry access

License

See LICENSE file for details.