MCP server

Patchwire

dev.monowire/patchwire

Checked 26 Oct 2026, 08:29 UTC · Connected to it and listed its tools

Hourly security advisories for JS, AI and web3 packages: ranges, fixes and exploit conditions.

Website

At a glance

Type

MCP server

Publisher

monowire.dev (verified by the MCP Registry)

Status

Working at last check

Tools

5

Token cost

About 1,245 tokens per request

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok

Last checked

26 Oct 2026, 08:29 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http patchwire https://patchwire.monowire.dev/mcp

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.patchwire]
url = "https://patchwire.monowire.dev/mcp"

Gemini CLI

{"mcpServers":{"patchwire":{"httpUrl":"https://patchwire.monowire.dev/mcp"}}}

Cursor

{"mcpServers":{"patchwire":{"url":"https://patchwire.monowire.dev/mcp"}}}

VS Code

{"servers":{"patchwire":{"type":"http","url":"https://patchwire.monowire.dev/mcp"}}}

Antigravity

agy mcp add patchwire https://patchwire.monowire.dev/mcp

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"patchwire","server_url":"https://patchwire.monowire.dev/mcp","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"patchwire","server_url":"https://patchwire.monowire.dev/mcp"}

Tools

• get_advisories ~292 tokens
  Check npm packages for security advisories. Start here before installing, upgrading or deploying: send 1 to 50 package names (never versions) and get, per package, its total and up to 20 advisories of the last 120 days, newest first, each with vulnerable ranges, fixed versions and the conditions tha
• get_advisory ~200 tokens
  Read one advisory in full by id: CVE, GHSA, MAL or Patchwire id, any case, aliases resolve. Returns its ranges, fixed versions, exploit conditions with the source sentence they come from, a summary and the sources. Use it after get_advisories or list_feed gave you an id. An unknown id, or one older
• get_platform_bulletins ~198 tokens
  Get the security bulletins and announced changes of hosting and data platforms, which are not npm packages and never show in a lockfile: Vercel, Supabase, Neon and the other platforms of the platform parameter. Returns up to 50, newest first; omit platform for all of them. For npm packages, use get_
• latest_safe ~230 tokens
  Find the version to upgrade to for one npm package. Returns, per release line (major, or minor for 0.x), the version that fixes every known advisory of the last 120 days; a line still affected has safe: null and the ids that keep it affected. Also lists advisories with no fix found, and says whether
• list_feed ~325 tokens
  List the latest advisories across every tracked stack, newest first, without a package list. Filter by sector (js, stack, ai, crypto) and severity; by default the last 7 days and at most 20 advisories (days 1 to 30, limit 1 to 50). An empty list means nothing matched. To check your own packages, use

Browse

• Vercel tools
• Supabase tools
• Cloud and hosting
• Security scanning
• Crypto and blockchains

Related MCP servers

• Daystruct
  Find source-package workflows, inspect live prices and evidence, and connect with a scoped key.
• DepScout
  Scan packages and lockfiles (npm, PyPI, Go, Maven, Cargo, NuGet) for vulnerabilities and malware.
• CERT-FR Security Advisories — buy per-query in-session (certfrwatch)
  CERT-FR (ANSSI) security advisories & alerts: French national CERT vulnerability feed, hourly
• Knowledge Commons
  Knowledge commons for AI agents: cited, licensed, queryable claims over MCP.
• EchelonGraph CVE & Exposure
  CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.
• Dependency Trust
  Trust-check any dependency for agents: OpenSSF Scorecard, licenses, CVEs, deps. 7 ecosystems.
• Debian Security Advisories — buy per-query in-session (debianwatch)
  Debian Security Advisories (DSA). $0.01/query. Register in-session — free testnet funds.
• MCPFax Dev Package Intelligence
  Is this dependency current, licensed, deprecated, or already carrying a CVE?

Badge for your README

[![AptLynx](https://aptlynx.net/badge/dev.monowire/patchwire.svg)](https://aptlynx.net/servers/dev.monowire/patchwire)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents