PkgGuard

Working · 377 ms

co.youraitools/pkgguardv0.1.1 Domain verified

Dependency scan for agents: known CVEs and malicious packages via OSV.dev. By Crypto Money Maker

Security

Website Registry entry

Maintain this server? Claim it

Try it

Call this server's tools from your browser. Nothing to install.

https://api.youraitools.co/pkgguard/mcp

Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.

Tool list from our last check. Connect live to refresh it.

check_package Read-only

Checks one package version (npm, PyPI, Go, crates.io, Packagist, RubyGems, Maven, NuGet) against OSV.dev: advisory ids, severity, CVSS, fixed-in versions and malicious flags. Free tier: 30 calls/day per IP with full results, then $0.001 per call in USDC over x402 (/v1/package).

namestring, required

Package name, e.g. lodash

versionstring, required

Exact version, e.g. 4.17.15

ecosystemstring

One of npm, PyPI, Go, crates.io, Packagist, RubyGems, Maven, NuGet, Pub, Hex (default npm)

Tools (2)

check_package

Argument	Type	Description
filename	string	Optional file name, helps type detection
manifest	string	Manifest or lockfile contents (package.json, package-lock.json, requirements.txt, Pipfile.lock, poetry.lock, go.mod, Cargo.lock, composer.lock)
packages	array	Alternative to manifest: [{ecosystem, name, version}], up to 500
include_dev	boolean	Include devDependencies (default true)

Argument	Type	Description
name*	string	Package name, e.g. lodash
version*	string	Exact version, e.g. 4.17.15
ecosystem	string	One of npm, PyPI, Go, crates.io, Packagist, RubyGems, Maven, NuGet, Pub, Hex (default npm)