Check a package version for known vulnerabilities and Packagist release facts.
Connect Remote server
claude mcp add --transport http dependency-check https://deps.bestsmartgoods.com/mcp --header "X-API-Key: <X_API_KEY>"
{
"mcpServers": {
"dependency-check": {
"url": "https://deps.bestsmartgoods.com/mcp",
"headers": {
"X-API-Key": "<X_API_KEY>"
}
}
}
}
{
"servers": {
"dependency-check": {
"type": "http",
"url": "https://deps.bestsmartgoods.com/mcp",
"headers": {
"X-API-Key": "<X_API_KEY>"
}
}
}
}
Settings > Connectors > Add custom connector
URL: https://deps.bestsmartgoods.com/mcp
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools 2 found in our last check
check_packageRead the current Packagist facts for one PHP package: latest stable version, required PHP, license, and whether it is abandoned. Use it before composer require. Send vendor/package. Set version to ask about one release; version_found is false when that release is absent, and the…
check_dependencyLook up known vulnerabilities for one package version from OSV. Returns advisory id, summary, CVE aliases, severity string, and fixed versions when the advisory lists them. Ecosystems: packagist, npm, pypi, go, crates.io, maven, rubygems, nuget. Omit ecosystem and a vendor/packa…
Headers
| Name | Description |
|---|---|
X-API-KeyRequired, secret | API key from https://firm.bestsmartgoods.com/signup |
Details
| Endpoint | https://deps.bestsmartgoods.com/mcp (Streamable HTTP) |
| First published | 4 Nov 2026 |
| Last updated | 4 Nov 2026 |
| Registry name | io.github.ladanyin/dependency-check |
More security servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
