Blocks typosquatted or hallucinated npm/PyPI packages before an AI agent installs them.
Connect Remote server
claude mcp add --transport http pkg-oracle https://mcp-snowy-dew-9447.fly.dev/mcp
{
"mcpServers": {
"pkg-oracle": {
"url": "https://mcp-snowy-dew-9447.fly.dev/mcp"
}
}
}
{
"servers": {
"pkg-oracle": {
"type": "http",
"url": "https://mcp-snowy-dew-9447.fly.dev/mcp"
}
}
}
Settings > Connectors > Add custom connector
URL: https://mcp-snowy-dew-9447.fly.dev/mcp
Tools 1 found in our last check
verify_packageDependency Trust Oracle. Call this BEFORE writing any package into a manifest (package.json, requirements.txt, pyproject.toml, Cargo.toml, ...). It checks whether the package actually exists on its registry, cross-references OSV.dev for known CVEs, pulls the package's OpenSSF Sc…
Details
| Endpoint | https://mcp-snowy-dew-9447.fly.dev/mcp (Streamable HTTP) |
| First published | 3 Sep 2026 |
| Last updated | 3 Sep 2026 |
| Registry name | io.github.julian-martin89/pkg-oracle |
More developer tools servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
