MCP server

pkgproof Official

net.pkgproof/pkgproof

Checked 25 Oct 2026, 21:11 UTC · Still published on its registry; checked against OSV.dev; never run by us

Verify an npm or PyPI package before install: advisories, install scripts, typosquats, repository.

Runs on your computerVerified publisher: pkgproof.net

Website Source

At a glance

Type: MCP server
Publisher: pkgproof.net (verified by the MCP Registry)
Status: Runs on your computer
Sets up in: Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code
Last checked: 25 Oct 2026, 21:11 UTC

Connect it to your agent

Add to Cursor Add to VS Code VS Code Insiders

Opens the app, which shows the server and asks you to confirm. It then runs the package on your computer with your permissions. For other apps, copy the setup below.

Claude Code

claude mcp add pkgproof -- npx -y @pkgproof/mcp@0.2.1

Claude Desktop

{"mcpServers":{"pkgproof":{"command":"npx","args":["-y","@pkgproof/mcp@0.2.1"]}}}

Codex (config.toml)

[mcp_servers.pkgproof]
command = "npx"
args = ["-y","@pkgproof/mcp@0.2.1"]

Gemini CLI

{"mcpServers":{"pkgproof":{"command":"npx","args":["-y","@pkgproof/mcp@0.2.1"]}}}

Cursor

{"mcpServers":{"pkgproof":{"command":"npx","args":["-y","@pkgproof/mcp@0.2.1"]}}}

VS Code

{"servers":{"pkgproof":{"type":"stdio","command":"npx","args":["-y","@pkgproof/mcp@0.2.1"]}}}

Runs on your computer with your permissions: check the package and its source before installing.

Related MCP servers

The Agent Forge
See which AI models fall for traps in real jobs, and check MCP servers or skills before install.
FHI MCP Server Security Audit
Free payment guide and Base-USDC x402 MCP security, package, domain, and SEC tools.
Tonbot Tolca
Verify a company before paying it: OFAC sanctions, UK/Canada registries, contractor licences (x402)
Crypto, web, finance and app data tools
160 tools: crypto derivatives, EVM, cloud & LLM prices, Polymarket, OFAC, SEC, FRED, DNS, CVE.
Sighttrue
Measured readings on open-source dependencies: health, end-of-life, model prices, incidents.
PG1 Sovereign Threat Intelligence
Preflight for AI agents, signed: one call; wallet, domain, IP abuse, package checks and CVEs.
DepScout
Scan packages and lockfiles (npm, PyPI, Go, Maven, Cargo, NuGet) for vulnerabilities and malware.
Agent Tested
Hands-on agent test results for small AI tools and MCP servers, live AI outages, malware name check.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/net.pkgproof/pkgproof.svg)](https://aptlynx.net/servers/net.pkgproof/pkgproof)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents