salemalem/npmscan-mcp-plugin

开发工具

本页由 AI 翻译，技术细节请以原文为准。查看原文

526 stars 0 forks 质量 59 趋势 54

Repository Install

国家防范机制扫描多氯二苯并呋喃插件

概览

一个 Claude 代码插件,可以给 Claude 仅读取 npm 软件包和脆弱性外观,由 npmscan 支持. com是免费的,未经认证的MCP服务器. NPLScan也正式被ChatGPT和克洛德在npmscan上列出. com的MCP页面,因此用户可以验证这个插件指向同一公共服务. - (Anthropic的官方克洛德目录):claude.ai/custize/chills/./npmscan - (安装npmscan作为一击设置的应用程序): chalgpt.com/plugins/./npmscan - : mcphq.org - : lamorblock.co/mcp - : Piebald-AI/awesome-gemini-cli - extensions -: 散列-上线/awesome-codx-plugins - npmscan.com/mcp. - (xAI的官方插件市场):以xai-org/plugin-marketplace#1506提交,等待xAI审查. 参见使用与Grok Build. - (Awesome Copilot market):以 github/awesome-copilot #5142提交。 - (扩展画廊):从此 repo 自动索引。见用双子座CLI. - (npmscan, https://npmscan.] (英语)

概述（AI 翻译）

Claude 代码插件 Claude 仅读 npm 软件包和弱点检查,由 npmscan.com的免费,未经认证的MCP服务器.

NPAScan也正式上市, npmscan.com的MCP页面,用户可以验证此插件指向同一公共服务。

□ 官方名单

克洛德(Anthropic的官方克洛德目录): claude.ai/定制/技能/./npmscan
ChatGPT(安装 npmscan作为一击设置的应用程序): chigpt.com/plugins/./npmscan (英语).
** mcpH * : mcphq.org (中文(简体) ).
** 传感器Block MCP指数**:收音机。
** 令人赞叹的双子座CLI**:Piebald-AI/令人赞叹的双子座CLI
** 很棒的双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双子双
** 惊人的编码插件**:散列图在线/惊人的编码插件
其他客户的Setup文件: npmscan.com/mcp

待定:

Grok Building(xAI的官方插件市场):提交日期: xai-org/plugin-marketplace#1506, (中文(简体) ). 等待xAI审查. 参见使用与Grok Build.
GitHub副驾驶(优异副驾驶市场):提交 github/aweome-copilot #5142 (英语).
Gemini CLI(扩展画廊):从此回波自动索引. 见

本页由 AI 翻译，技术细节请以原文为准。

README

以下为原文 README 节选，完整内容请查看原文。

NPMScan plugin for Claude Code

A Claude Code plugin that gives Claude read-only npm package and vulnerability lookups, backed by npmscan.com’s free, unauthenticated MCP server.

NPMScan is also officially listed for both ChatGPT and Claude on npmscan.com’s MCP page, so users can verify that this plugin points at the same public service.

Official listings

Claude (Anthropic’s official Claude directory): claude.ai/customize/skills/…/npmscan
ChatGPT (install npmscan as an app for one-click setup): chatgpt.com/plugins/…/npmscan
mcpHQ: mcphq.org
TensorBlock MCP Index: tensorblock.co/mcp
Awesome Gemini CLI: Piebald-AI/awesome-gemini-cli
Awesome Gemini CLI Extensions: Piebald-AI/awesome-gemini-cli-extensions
Awesome Codex Plugins: hashgraph-online/awesome-codex-plugins
Setup docs for other clients: npmscan.com/mcp

Pending:

Grok Build (xAI’s official plugin marketplace): submitted in xai-org/plugin-marketplace#1506, awaiting xAI review. See Using it with Grok Build.
GitHub Copilot (Awesome Copilot marketplace): submitted in github/awesome-copilot#5142.
Gemini CLI (extension gallery): indexed automatically from this repo. See Using it with Gemini CLI.

What it adds

MCP server (npmscan, https://npmscan.com/api/mcp) with twenty-three tools — see Tools below. Every tool result includes an npmscanUrl linking back to the full write-up on npmscan.com. No API key or auth required — same public data as the website. The server is stateless and rate-limited to 30 requests/minute per IP. Every vulnerability finding carries isMalware, so a confirmed-malicious package is reported as malware to remove, never as an ordinary bug.
/npmscan:dependency-audit skill — chains batch_query_vulnerabilities → get_package/get_package_version → analyze_transitive_dependencies → the maintainer/provenance/license/remediation/alternative tools into one dependency-audit report, instead of leaving that tool sequencing to Claude each time. Also handles PR-style before/after diffs via diff_dependencies, raw npm audit --json output via enrich_npm_audit,

在 GitHub 查看完整 README

安装

This server does not publish a one-line install command.

Open the repository installation guide 新手？先看 mcpskill.org 教程 →

配置

{
  "mcpServers": {
    "npmscan": {
      "type": "http",
      "url": "https://npmscan.com/api/mcp"
    }
  }
}