MCP server

pkg-oracle — Dependency Trust Oracle

io.github.julian-martin89/pkg-oracle

Checked 26 Oct 2026, 08:29 UTC · Connected to it and listed its tools

Blocks typosquatted or hallucinated npm/PyPI packages before an AI agent installs them.

Working at last checkAbout 470 tokens per request once connected1 toolsDescription tries to instruct AI agents

https://mcp-snowy-dew-9447.fly.dev/mcp

At a glance

Type: MCP server
Publisher: Not verified
Status: Working at last check
Tools: 1
Token cost: About 470 tokens per request
Sets up in: Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok
Last checked: 26 Oct 2026, 08:29 UTC

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http pkg-oracle https://mcp-snowy-dew-9447.fly.dev/mcp

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.pkg-oracle]
url = "https://mcp-snowy-dew-9447.fly.dev/mcp"

Gemini CLI

{"mcpServers":{"pkg-oracle":{"httpUrl":"https://mcp-snowy-dew-9447.fly.dev/mcp"}}}

Cursor

{"mcpServers":{"pkg-oracle":{"url":"https://mcp-snowy-dew-9447.fly.dev/mcp"}}}

VS Code

{"servers":{"pkg-oracle":{"type":"http","url":"https://mcp-snowy-dew-9447.fly.dev/mcp"}}}

Antigravity

agy mcp add pkg-oracle https://mcp-snowy-dew-9447.fly.dev/mcp

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"pkg-oracle","server_url":"https://mcp-snowy-dew-9447.fly.dev/mcp","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"pkg-oracle","server_url":"https://mcp-snowy-dew-9447.fly.dev/mcp"}

verify_package ~470 tokens
Dependency Trust Oracle. Call this BEFORE writing any package into a manifest (package.json, requirements.txt, pyproject.toml, Cargo.toml, ...). It checks whether the package actually exists on its registry, cross-references OSV.dev for known CVEs, pulls the package's OpenSSF Scorecard via deps.dev,

Presend dependency checks
Check an npm/PyPI package before an AI agent installs it: 5 focused supply-chain tools.
url-oracle — URL Trust Oracle
Flags phantom-squatted/typosquatted domains and known-malicious URLs before an agent follows them.
Package Intel MCP
Package intelligence for AI agents across npm, PyPI, crates.io and deps.dev. No API keys.
DataNexus MCP
Public data intelligence for AI agents — CVE, compliance, patents, contracts, domains.
Signal Oracle
Pay-per-call change-intelligence feeds for AI agents over x402 (deps, security, regs, tariffs)
Fuze Data Tools
No-code web scraping & data-extraction Apify actors: scrape and enrich web data at scale.
Conclave Agent-Rails
Pay-per-call x402 data tools on Base: Solana snapshots, prices, package metadata.
Conclave Agent-Rails
Pay-per-call x402 data tools on Base: Solana snapshots, prices, package metadata.

[![AptLynx](https://aptlynx.net/badge/io.github.julian-martin89/pkg-oracle.svg)](https://aptlynx.net/servers/io.github.julian-martin89/pkg-oracle)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents