Package Intel MCP

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Package intelligence for AI agents across npm, PyPI, crates.io and deps.dev. No API keys.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "Package Intel MCP": {
      "url": "https://package.datakoot.com/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (6)

• package_info read-only

  Get core metadata for a package: latest version, description, license, homepage, source repository, maintainers, and whether it is deprecated. Use before an agent installs or recommends a dependency. Ecosystems: npm, pypi, cargo.

  Parameters:

  • ecosystem (required) — string — Package registry to look in. One of: npm, pypi, cargo.
  • name (required) — string — Package/crate name

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• package_versions read-only

  List recent released versions of a package with release dates (most recent first). Helps an agent pick a version or check how actively it is maintained. Ecosystems: npm, pypi, cargo.

  Parameters:

  • ecosystem (required) — string — Package registry to look in. One of: npm, pypi, cargo.
  • name (required) — string — Exact package name as published in that registry, e.g. express for npm, requests for pypi, serde for cargo.
  • limit — integer — Maximum number of results to return.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• package_downloads read-only

  Get popularity/download statistics for a package (recent download counts). Useful for judging how widely used and battle-tested a dependency is. Ecosystems: npm, pypi, cargo.

  Parameters:

  • ecosystem (required) — string — Package registry to look in. One of: npm, pypi, cargo.
  • name (required) — string — Exact package name as published in that registry, e.g. express for npm, requests for pypi, serde for cargo.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• package_dependencies read-only

  List the direct dependencies of a specific package version (defaults to latest), via deps.dev. Lets an agent understand what a package pulls in before adding it. Ecosystems: npm, pypi, cargo.

  Parameters:

  • ecosystem (required) — string — Package registry to look in. One of: npm, pypi, cargo.
  • name (required) — string — Exact package name as published in that registry, e.g. express for npm, requests for pypi, serde for cargo.
  • version — string — Optional; defaults to the latest/default version

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• package_health read-only

  A composite trust/health check for a package an agent is considering: latest-release recency, deprecation status, license present, maintainer count, dependency count, and any known security advisories (via deps.dev). Returns a summary an agent can act on. Ecosystems: npm, pypi, cargo.

  Parameters:

  • ecosystem (required) — string — Package registry to look in. One of: npm, pypi, cargo.
  • name (required) — string — Exact package name as published in that registry, e.g. express for npm, requests for pypi, serde for cargo.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• package_search read-only

  Search for packages by keyword and get the top matches with descriptions. Supported ecosystems: npm and cargo (PyPI has no public search API).

  Parameters:

  • ecosystem (required) — string — Package registry to look in. One of: npm, pypi, cargo.
  • query (required) — string — Free-text search terms, matched against package names and descriptions.
  • limit — integer — Maximum number of results to return.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

Repository

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.