NestDaddy

pkg-oracle — Dependency Trust Oracle

io.github.julian-martin89/pkg-oracle · v1.0.1

Blocks typosquatted or hallucinated npm/PyPI packages before an AI agent installs them.

Connect Remote server

Terminal
claude mcp add --transport http pkg-oracle https://mcp-snowy-dew-9447.fly.dev/mcp
~/.cursor/mcp.json
{
  "mcpServers": {
    "pkg-oracle": {
      "url": "https://mcp-snowy-dew-9447.fly.dev/mcp"
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "pkg-oracle": {
      "type": "http",
      "url": "https://mcp-snowy-dew-9447.fly.dev/mcp"
    }
  }
}
Claude Desktop
Settings > Connectors > Add custom connector
URL: https://mcp-snowy-dew-9447.fly.dev/mcp

Tools 1 found in our last check

  • verify_package

    Dependency Trust Oracle. Call this BEFORE writing any package into a manifest (package.json, requirements.txt, pyproject.toml, Cargo.toml, ...). It checks whether the package actually exists on its registry, cross-references OSV.dev for known CVEs, pulls the package's OpenSSF Sc…

Details

Endpointhttps://mcp-snowy-dew-9447.fly.dev/mcp (Streamable HTTP)
First published3 Sep 2026
Last updated3 Sep 2026
Registry nameio.github.julian-martin89/pkg-oracle

More developer tools servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.