1. Conduid
  2. Data
  3. wyattjoh/jsr-mcp
MCP server · Data

wyattjoh/jsr-mcp

Model Context Protocol server for the JSR (JavaScript Registry)

Unclaimed MIT last commit 9 months ago data
53Fair

Scored 7 days ago · breakdown

About wyattjoh/jsr-mcp

wyattjoh/jsr-mcp is an MCP server published by wyattjoh in the Data category: model Context Protocol server for the JSR (JavaScript Registry).

The repository has 4 stars and 2 forks, with the last commit 9 months ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

From source
git clone https://github.com/wyattjoh/jsr-mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (40)

jsr_accept_scope_inviteAccept invite (requires auth)

Parameters not published.

jsr_add_scope_memberInvite member (requires auth)

Parameters not published.

jsr_approve_authorizationApprove authorization (requires auth)

Parameters not published.

jsr_create_authorizationStart authorization flow (requires auth)

Parameters not published.

jsr_create_packageCreate new package (requires auth)

Parameters not published.

jsr_create_package_versionUpload new version (requires auth)

Parameters not published.

jsr_create_scopeCreate new scope (requires auth)

Parameters not published.

jsr_decline_scope_inviteDecline invite (requires auth)

Parameters not published.

jsr_delete_packageDelete package (requires auth)

Parameters not published.

jsr_delete_scopeDelete scope (requires auth)

Parameters not published.

Show all 40 tools
jsr_delete_scope_inviteDelete scope invite (requires auth)

Parameters not published.

jsr_deny_authorizationDeny authorization (requires auth)

Parameters not published.

jsr_exchange_authorizationExchange code for token (requires auth)

Parameters not published.

jsr_get_authorization_detailsGet authorization details

Parameters not published.

jsr_get_current_userGet authenticated user

Parameters not published.

jsr_get_current_user_invitesGet user's pending invites

Parameters not published.

jsr_get_current_user_scope_memberGet user's membership in a scope

Parameters not published.

jsr_get_current_user_scopesGet user's scopes

Parameters not published.

jsr_get_packageGet package details

Parameters not published.

jsr_get_package_dependenciesGet dependencies

Parameters not published.

jsr_get_package_dependentsFind dependent packages

Parameters not published.

jsr_get_package_metadataGet package metadata

Parameters not published.

jsr_get_package_scoreGet package quality score

Parameters not published.

jsr_get_package_versionGet specific version details

Parameters not published.

jsr_get_publishing_taskGet publishing task status

Parameters not published.

jsr_get_scopeGet scope details

Parameters not published.

jsr_get_statsGet registry statistics

Parameters not published.

jsr_get_userGet user details

Parameters not published.

jsr_get_user_scopesGet user's scopes

Parameters not published.

jsr_list_package_versionsList all versions

Parameters not published.

jsr_list_packagesList all registry packages

Parameters not published.

jsr_list_scope_invitesList pending invites

Parameters not published.

jsr_list_scope_membersList scope members

Parameters not published.

jsr_list_scope_packagesList packages in a scope

Parameters not published.

jsr_remove_scope_memberRemove member (requires auth)

Parameters not published.

jsr_search_packagesSearch for packages

Parameters not published.

jsr_update_packageUpdate package (requires auth)

Parameters not published.

jsr_update_package_versionUpdate version, e.g., yank (requires auth)

Parameters not published.

jsr_update_scopeUpdate scope settings (requires auth)

Parameters not published.

jsr_update_scope_memberUpdate member role (requires auth)

Parameters not published.

Ask AI

✦

Ask AI about wyattjoh/jsr-mcp

Powered by Claude · Grounded in docs

I know everything about wyattjoh/jsr-mcp. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

Static checks derived from the repository 4 hours ago. Heuristics on the source, not an audit.

  • ✓README presentThe repository ships documentation.
  • ✓License declaredUsable under a stated license.
  • ✓Tests presentA test suite exists in the repository.
  • ✓Dependencies pinnedA lockfile pins dependency versions.
  • ✓No dynamic code executionSource scan found no eval, dynamic Function, or shell execution.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

README

JSR MCP

A Deno monorepo containing packages for JSR (JavaScript Registry) access:

Features

  • Search packages across the JSR registry
  • Get package details, versions, and dependencies
  • Manage scopes and package publishing
  • Handle member invitations and permissions
  • Access registry statistics and metadata
  • Full authentication support for write operations

Requirements

  • Deno 2.x or later
  • Network access to JSR API
  • JSR API token for authenticated operations (optional)

Packages

@wyattjoh/jsr

Core library for accessing JSR API:

deno add @wyattjoh/jsr
import { getPackage, searchPackages } from "@wyattjoh/jsr";

const results = await searchPackages({ query: "react" });
const pkg = await getPackage("deno", "std");

See full documentation

@wyattjoh/jsr-mcp

MCP server for LLM integration:

# Run directly from JSR
deno run --allow-net --allow-env jsr:@wyattjoh/jsr-mcp

# Or install globally
deno install --global --allow-net --allow-env -n jsr-mcp jsr:@wyattjoh/jsr-mcp

For Claude Desktop app integration, add this to your claude_desktop_config.json:

{
  "mcpServers": {
    "jsr": {
      "command": "deno",
      "args": [
        "run",
        "--allow-net",
        "--allow-env",
        "jsr:@wyattjoh/jsr-mcp"
      ],
      "env": {
        "JSR_API_TOKEN": "your-api-token-here"
      }
    }
  }
}

Option 2: From Source

  1. Clone this repository
  2. Install dependencies:
    deno cache packages/*/mod.ts
    
  3. Run the server:
    deno run --allow-net --allow-env packages/jsr-mcp/mod.ts
    

Available Tools

The MCP server provides 40 tools for comprehensive JSR access:

Package Operations

  • jsr_search_packages - Search for packages
  • jsr_get_package - Get package details
  • jsr_get_package_version - Get specific version details
  • jsr_list_package_versions - List all versions
  • jsr_get_package_metadata - Get package metadata
  • jsr_get_package_dependencies - Get dependencies
  • jsr_get_package_score - Get package quality score
  • jsr_get_package_dependents - Find dependent packages
  • jsr_create_package - Create new package (requires auth)
  • jsr_update_package - Update package (requires auth)
  • jsr_delete_package - Delete package (requires auth)

Package Version Management

  • jsr_create_package_version - Upload new version (requires auth)
  • jsr_update_package_version - Update version, e.g., yank (requires auth)

Scope Management

  • jsr_get_scope - Get scope details
  • jsr_list_scope_packages - List packages in a scope
  • jsr_create_scope - Create new scope (requires auth)
  • jsr_update_scope - Update scope settings (requires auth)
  • jsr_delete_scope - Delete scope (requires auth)

Member Management

  • jsr_list_scope_members - List scope members
  • jsr_add_scope_member - Invite member (requires auth)
  • jsr_update_scope_member - Update member role (requires auth)
  • jsr_remove_scope_member - Remove member (requires auth)
  • jsr_list_scope_invites - List pending invites
  • jsr_delete_scope_invite - Delete scope invite (requires auth)
  • jsr_accept_scope_invite - Accept invite (requires auth)
  • jsr_decline_scope_invite - Decline invite (requires auth)

User Operations

  • jsr_get_current_user - Get authenticated user
  • jsr_get_current_user_scopes - Get user's scopes
  • jsr_get_current_user_scope_member - Get user's membership in a scope
  • jsr_get_current_user_invites - Get user's pending invites
  • jsr_get_user - Get user details
  • jsr_get_user_scopes - Get user's scopes

Registry Operations

  • jsr_list_packages - List all registry packages
  • jsr_get_stats - Get registry statistics

Authorization (OAuth)

  • jsr_create_authorization - Start authorization flow (requires auth)
  • jsr_get_authorization_details - Get authorization details
  • jsr_approve_authorization - Approve authorization (requires auth)
  • jsr_deny_authorization - Deny authorization (requires auth)
  • jsr_exchange_authorization - Exchange code for token (requires auth)

Publishing

  • jsr_get_publishing_task - Get publishing task status

Example Usage

// Search for packages
jsr_search_packages({ query: "react", limit: 10 });

// Get package details
jsr_get_package({ scope: "deno", name: "std" });

// List versions with pagination
jsr_list_package_versions({
  scope: "deno",
  name: "std",
  limit: 20,
  page: 1,
});

// Get dependencies for a specific version
jsr_get_package_dependencies({
  scope: "deno",
  name: "std",
  version: "1.0.0",
});

// Create a new scope (requires authentication)
jsr_create_scope({
  scope: "my-org",
  description: "My organization's packages",
});

Security Notes

  • Read operations do not require authentication
  • Write operations require a valid JSR API token
  • The server only accesses the JSR API endpoints
  • No local file system access beyond reading environment variables

Development

This is a Deno workspace monorepo. All commands run from the root affect all packages.

# Clone the repository
git clone https://github.com/wyattjoh/jsr-mcp.git
cd jsr-mcp

# Cache dependencies
deno cache packages/*/mod.ts

# Format all code
deno fmt

# Lint all packages
deno lint

# Type check all packages
deno check packages/jsr/mod.ts packages/jsr-mcp/mod.ts

# Run tests
deno test --allow-net packages/

# Run MCP server locally (with watch mode)
deno run --allow-read --allow-write --allow-env --allow-run --allow-net --watch packages/jsr-mcp/mod.ts

# Run MCP server in production
deno run --allow-read --allow-write --allow-env --allow-run --allow-net packages/jsr-mcp/mod.ts

# Build binary
cd packages/jsr-mcp
deno compile --allow-read --allow-write --allow-env --allow-run --allow-net --output=jsr-mcp mod.ts

# Publish packages (CI/CD)
deno publish

Working on Individual Packages

# Work on @wyattjoh/jsr
cd packages/jsr
deno test --allow-net

# Work on @wyattjoh/jsr-mcp
cd packages/jsr-mcp
deno run --allow-net --allow-env mod.ts

License

MIT

README fetched from the repository 4 hours ago. The original is authoritative.

Questions

About wyattjoh/jsr-mcp

How do I install wyattjoh/jsr-mcp?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is wyattjoh/jsr-mcp safe to use with an AI agent?

Its trust score is 53 out of 100 (fair). It passes 5 of the 6 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is wyattjoh/jsr-mcp still maintained?

The last commit was 9 months ago. That's long enough that you should check whether the maintainer is responding to issues before depending on it.