Live internet status, security incidents, and dependency and GitHub repo checks. No key.
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Checks a public GitHub repo: every package its lockfiles pin at its latest commit, in every folder and 14 ecosystems (npm, PyPI, crates.io, Go, Maven, NuGet, RubyGems, Packagist, Pub, Swift, Hex, Hackage, CRAN, Julia), against every known flaw. Says the answer on the site's scale (yes, mostly, kind-of, no; unknown when it holds no lockfile we can read), what to update first and what each flaw lets someone do, in plain words. A first look at a big repo takes a few seconds.
owner/name, or the repo's GitHub URL: vercel/next.js, https://github.com/pallets/flask
Also every flaw of every package (hundreds of KB for a big repo). Without it: the answer, what to update and why, and where the full list is.
Checks a public GitHub repo: every package its lockfiles pin at its latest commit, in every folder and 14 ecosystems (npm, PyPI, crates.io, Go, Maven, NuGet, RubyGems, Packagist, Pub, Swift, Hex, Hackage, CRAN, Julia), against every known flaw. Says the answer on the site's scale (yes, mostly, kind-of, no; unknown when it holds no lockfile we can read), what to update first and what each flaw lets someone do, in plain words. A first look at a big repo takes a few seconds.
| Argument | Type | Description |
|---|---|---|
| full | boolean | Also every flaw of every package (hundreds of KB for a big repo). Without it: the answer, what to update and why, and where the full list is. |
| repo* | string | owner/name, or the repo's GitHub URL: vercel/next.js, https://github.com/pallets/flask |
{
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"repo"
],
"properties": {
"full": {
"type": "boolean",
"description": "Also every flaw of every package (hundreds of KB for a big repo). Without it: the answer, what to update and why, and where the full list is."
},
"repo": {
"type": "string",
"description": "owner/name, or the repo's GitHub URL: vercel/next.js, https://github.com/pallets/flask"
}
}
}Checks a project's dependencies and a person's apps against the incidents this site explains, not every known flaw: for a full scan of a public GitHub repo, use check_repo. Give packages, product ids, or the text of a lockfile or manifest (package.json, package-lock.json, pnpm-lock.yaml, yarn.lock, requirements.txt, composer.lock). Says which packages to update and to which version. Nothing sent is stored.
| Argument | Type | Description |
|---|---|---|
| lockfile | string | The whole text of a lockfile or manifest. |
| packages | array | |
| products | array | Product ids people install: chrome, firefox, safari, edge, windows, macos, ios, android, linux, office, whatsapp, zoom, plex, wordpress, php, nodejs, python, openssl, nginx, apache-httpd, ivanti-connect-secure, pan-os, fortimail, fortios, cisco-asa, tidb-cloud. |
{
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"lockfile": {
"type": "string",
"maxLength": 5000000,
"description": "The whole text of a lockfile or manifest."
},
"packages": {
"type": "array",
"items": {
"type": "object",
"required": [
"ecosystem",
"name"
],
"properties": {
"name": {
"type": "string"
},
"version": {
"type": "string"
},
"ecosystem": {
"type": "string",
"description": "One of npm, PyPI, Packagist, Maven, Go, crates.io, RubyGems, NuGet, Docker, GitHub Actions, ConanCenter, Hackage, Pub, SwiftURL, Hex, CRAN, Julia (lowercase works, pip and composer too)."
}
}
}
},
"products": {
"type": "array",
"items": {
"type": "string"
},
"description": "Product ids people install: chrome, firefox, safari, edge, windows, macos, ios, android, linux, office, whatsapp, zoom, plex, wordpress, php, nodejs, python, openssl, nginx, apache-httpd, ivanti-connect-secure, pan-os, fortimail, fortios, cisco-asa, tidb-cloud."
}
}
}What changed since a date, oldest first: incidents created, updated or resolved, and big services going down or coming back. Keep `next` and pass it as `since` next time to watch.
| Argument | Type | Description |
|---|---|---|
| since | string | An ISO date; the last 7 days when left out. |
{
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"since": {
"type": "string",
"description": "An ISO date; the last 7 days when left out."
}
}
}One incident by its id (as list_incidents or internet_status give it, like 2026-10-14-nextjs-rce), open or resolved.
| Argument | Type | Description |
|---|---|---|
| id* | string | The incident id. |
{
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"id"
],
"properties": {
"id": {
"type": "string",
"description": "The incident id."
}
}
}The live status of the whole internet: a one-sentence answer, every watched service (Cloudflare, AWS, Google Workspace, Discord, PlayStation Network, OpenAI, GitHub...) with its state and its group, and the open security incidents with what to do. Refreshed every 5 minutes.
No arguments.
{
"type": "object",
"properties": {}
}The open incidents (critical flaws, big outages, supply-chain attacks), worst first, each with its impact, what to do, the affected packages and products, and its page.
| Argument | Type | Description |
|---|---|---|
| severity | string | Only incidents of this severity. |
{
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"severity": {
"enum": [
"critical",
"major",
"minor"
],
"type": "string",
"description": "Only incidents of this severity."
}
}
}