MCP server

Package Risk

io.github.makosdDavid/package-risk

Checked 26 Oct 2026, 08:31 UTC · Still published on its registry; checked against OSV.dev; never run by us

Package risk checks: maintenance, licence, advisories. Paid per call in USDC, no signup.

Runs on your computer

Source

At a glance

Type: MCP server
Publisher: Not verified
Status: Runs on your computer
Sets up in: Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code
Last checked: 26 Oct 2026, 08:31 UTC

Connect it to your agent

Add to Cursor Add to VS Code VS Code Insiders

Opens the app, which shows the server and asks you to confirm. It then runs the package on your computer with your permissions. For other apps, copy the setup below.

Claude Code

claude mcp add package-risk --env EVM_PRIVATE_KEY=YOUR_VALUE -- npx -y @makosdav/package-risk-mcp@1.0.5

Claude Desktop

{"mcpServers":{"package-risk":{"command":"npx","args":["-y","@makosdav/package-risk-mcp@1.0.5"],"env":{"EVM_PRIVATE_KEY":"YOUR_VALUE"}}}}

Codex (config.toml)

[mcp_servers.package-risk]
command = "npx"
args = ["-y","@makosdav/package-risk-mcp@1.0.5"]
env = { EVM_PRIVATE_KEY = "YOUR_VALUE" }

Gemini CLI

{"mcpServers":{"package-risk":{"command":"npx","args":["-y","@makosdav/package-risk-mcp@1.0.5"],"env":{"EVM_PRIVATE_KEY":"YOUR_VALUE"}}}}

Cursor

{"mcpServers":{"package-risk":{"command":"npx","args":["-y","@makosdav/package-risk-mcp@1.0.5"],"env":{"EVM_PRIVATE_KEY":"YOUR_VALUE"}}}}

VS Code

{"servers":{"package-risk":{"type":"stdio","command":"npx","args":["-y","@makosdav/package-risk-mcp@1.0.5"],"env":{"EVM_PRIVATE_KEY":"YOUR_VALUE"}}}}

Runs on your computer with your permissions: check the package and its source before installing. Replace YOUR_VALUE with your own EVM_PRIVATE_KEY.

Browse

Related MCP servers

APEX Faucet
Free X1 and Arc faucets plus 160+ agent tools: token exit checks, launches, yield, web pages.
Fuze Data Tools
No-code web scraping & data-extraction Apify actors: scrape and enrich web data at scale.
Sighttrue
Measured readings on open-source dependencies: health, end-of-life, model prices, incidents.
Stack Facts
Signed EOL dates, exploited CVEs and LLM prices; pay per call in USDC, no account, no daily cap.
VAREXIS-INDEX - Source-linked evidence
7 packs: free read-only previews; paid snapshots/unsigned receipts. No advice or authority.
AttestPage (Quoteproof)
Use before citing a page, sharing links or installing a suggested package. Signed receipts.
Ai Vdb
Check packages for CVEs, slopsquatting, and CISA KEV before your AI agent installs them.
FiatDock
MCP marketplace: AI agents buy services from other agents per call in USDC, plus a bank cash-out

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.github.makosdDavid/package-risk.svg)](https://aptlynx.net/servers/io.github.makosdDavid/package-risk)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents