Dependency scan for agents: known CVEs and malicious packages via OSV.dev. By Crypto Money Maker
Connect Remote server
claude mcp add --transport http pkgguard https://api.youraitools.co/pkgguard/mcp
{
"mcpServers": {
"pkgguard": {
"url": "https://api.youraitools.co/pkgguard/mcp"
}
}
}
{
"servers": {
"pkgguard": {
"type": "http",
"url": "https://api.youraitools.co/pkgguard/mcp"
}
}
}
Settings > Connectors > Add custom connector
URL: https://api.youraitools.co/pkgguard/mcp
Tools 2 found in our last check
scan_dependenciesChecks a package.json, lockfile, requirements.txt, go.mod, Cargo.lock, poetry.lock or composer.lock (or a list of packages) against OSV.dev for known vulnerabilities and confirmed-malicious packages. Returns per-package advisory ids (CVE/GHSA/MAL), severity, CVSS and fixed-in ve…
check_packageChecks one package version (npm, PyPI, Go, crates.io, Packagist, RubyGems, Maven, NuGet) against OSV.dev: advisory ids, severity, CVSS, fixed-in versions and malicious flags. Free tier: 30 calls/day per IP with full results, then $0.001 per call in USDC over x402 (/v1/package).
Details
| Endpoint | https://api.youraitools.co/pkgguard/mcp (Streamable HTTP) |
| Package | @agentgate-builder/[email protected] (NPM, stdio) |
| First published | 22 Oct 2026 |
| Last updated | 22 Oct 2026 |
| Registry name | co.youraitools/pkgguard |
More security servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
