MCP server

PkgGuard

co.youraitools/pkgguard

Checked 26 Oct 2026, 08:29 UTC · Connected to it and listed its tools

Dependency scan for agents: known CVEs and malicious packages via OSV.dev. By Crypto Money Maker

Website

At a glance

Type

MCP server

Publisher

youraitools.co (verified by the MCP Registry)

Status

Working at last check

Tools

2

Token cost

About 482 tokens per request

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok

Last checked

26 Oct 2026, 08:29 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http pkgguard https://api.youraitools.co/pkgguard/mcp

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.pkgguard]
url = "https://api.youraitools.co/pkgguard/mcp"

Gemini CLI

{"mcpServers":{"pkgguard":{"httpUrl":"https://api.youraitools.co/pkgguard/mcp"}}}

Cursor

{"mcpServers":{"pkgguard":{"url":"https://api.youraitools.co/pkgguard/mcp"}}}

VS Code

{"servers":{"pkgguard":{"type":"http","url":"https://api.youraitools.co/pkgguard/mcp"}}}

Antigravity

agy mcp add pkgguard https://api.youraitools.co/pkgguard/mcp

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"pkgguard","server_url":"https://api.youraitools.co/pkgguard/mcp","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"pkgguard","server_url":"https://api.youraitools.co/pkgguard/mcp"}

Tools

• check_package ~193 tokens
  Checks one package version (npm, PyPI, Go, crates.io, Packagist, RubyGems, Maven, NuGet) against OSV.dev: advisory ids, severity, CVSS, fixed-in versions and malicious flags. Free tier: 30 calls/day per IP with full results, then $0.001 per call in USDC over x402 (/v1/package).
• scan_dependencies ~289 tokens
  Checks a package.json, lockfile, requirements.txt, go.mod, Cargo.lock, poetry.lock or composer.lock (or a list of packages) against OSV.dev for known vulnerabilities and confirmed-malicious packages. Returns per-package advisory ids (CVE/GHSA/MAL), severity, CVSS and fixed-in versions. Free tier: 30

Browse

• Security scanning
• Crypto and blockchains

Related MCP servers

• YourAITools MCP Hub
  All 22 YourAITools agent APIs in one MCP server. Most tools free; pay with credits or x402.
• quantakrypto pqc-tools
  Scan code for quantum-vulnerable cryptography and get NIST post-quantum migration guidance.
• DepScout
  Scan packages and lockfiles (npm, PyPI, Go, Maven, Cargo, NuGet) for vulnerabilities and malware.
• Jeevesus — DugganUSA threat-intel MCP
  Membrane for AI agents: threat intel you can check, IOC enrichment, pre-install package checks.
• vrsai
  Machine-native capabilities with explicit contracts and machine-readable commerce.
• Lazaretto
  Free lockfile malware check plus paid behavioral scan of packages, agent skills and MCP tools.
• FabTally Safe
  Read-only crypto safety: token honeypot checks, EIP-712 signature decode, approval scans.
• AgentAegis
  Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/co.youraitools/pkgguard.svg)](https://aptlynx.net/servers/co.youraitools/pkgguard)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents