JavaScript Package Manager MCP Server

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "JavaScript Package Manager MCP Server": {
      "url": "https://api.npmplus.dev/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (15)

• search_packages

  Search for packages in the npm registry

  Parameters:

  • query (required) — string — Search query
  • from — number — Offset for pagination
  • limit — number — Number of results (max 100)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• package_info

  Get detailed information about a package

  Parameters:

  • packageName (required) — string — Package name
  • version — string — Specific version

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• install_packages

  Install npm packages

  Parameters:

  • packages (required) — array — Package names to install
  • cwd — string — Working directory (not applicable for hosted service)
  • dev — boolean — Install as dev dependencies
  • global — boolean — Install globally

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• update_packages

  Update npm packages

  Parameters:

  • cwd — string — Working directory (not applicable for hosted service)
  • packages — array — Package names to update (empty for all)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• remove_packages

  Remove npm packages

  Parameters:

  • packages (required) — array — Package names to remove
  • cwd — string — Working directory (not applicable for hosted service)
  • global — boolean — Remove globally

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• check_bundle_size

  Check bundle size of a package

  Parameters:

  • packageName (required) — string — Package name
  • version — string — Package version

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• download_stats

  Get download statistics for a package

  Parameters:

  • packageName (required) — string — Package name
  • period — string — Time period

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• audit_dependencies

  Audit dependencies for vulnerabilities (provide either cwd path or package.json content)

  Parameters:

  • cwd — string — Working directory path (use '.' for current directory or full path)
  • fix — boolean — Auto-fix vulnerabilities
  • packageJson — string — Package.json content as string (alternative to cwd)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• check_vulnerability

  Check a specific package for vulnerabilities

  Parameters:

  • packageName (required) — string — Package name
  • version — string — Package version

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• check_outdated

  Check for outdated packages (provide either cwd path or package.json content)

  Parameters:

  • cwd — string — Working directory path (use '.' for current directory or full path)
  • packageJson — string — Package.json content as string (alternative to cwd)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• dependency_tree

  Display dependency tree (provide either cwd path or package.json content)

  Parameters:

  • cwd — string — Working directory path (use '.' for current directory or full path)
  • depth — number — Tree depth
  • production — boolean — Production only
  • packageJson — string — Package.json content as string (alternative to cwd)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• analyze_dependencies

  Analyze project dependencies (provide either cwd path or package.json content)

  Parameters:

  • cwd — string — Working directory path (use '.' for current directory or full path)
  • orphans — boolean — Check orphaned files
  • circular — boolean — Check circular deps
  • packageJson — string — Package.json content as string (alternative to cwd)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• list_licenses

  List project licenses (provide either cwd path or package.json content)

  Parameters:

  • cwd — string — Working directory path (use '.' for current directory or full path)
  • packageJson — string — Package.json content as string (alternative to cwd)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• check_license

  Check package license

  Parameters:

  • packageName (required) — string — Package name

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• clean_cache

  Clean package manager cache

  Parameters:

  • cwd — string — Working directory (not applicable for hosted service)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.