mcp-server-npm

# MCP Server for NPM Package Info A Model Context Protocol server that provides a tool to fetch npm package information. **Security Disclaimer**: this repository is intentionally vulnerable, intended to be used as an educational tool for MCP Server security. ## How to use the MCP Server Define the MCP Server in your Agent MCP configuration, as follows: ```json { "servers": { "npm-and-node-tools": { "type": "http", "url": "http://localhost:3500/mcp" } }, "inputs": [] } ``` ## Features - Exposes a `getNpmPackageInfo` tool using MCP - Uses HTTP (Streamable HTTP) transport for remote connections - Returns structured package information - Supports session management for stateful connections ## Installation ```bash npm install ``` ## Usage Start the server: ```bash npm start ``` The server will start listening on port 3000 by default. You can customize the port by setting the `PORT` environment variable: ```bash PORT=3500 npm start ``` This server is designed to be used with IDE integrations and AI agents that support the Model Context Protocol over HTTP. ### Tool: getNpmPackageInfo Parameters: - `packageName` (string): The name of the npm package to look up Returns: - `packageInfo` (object): JSON object containing all available information about the package