1. Conduid
  2. Agents
  3. Package Verify MCP
MCP server · Agents

Package Verify MCP

· github.com/Anicodeth/package-verify-mcp

MCP server that verifies an npm package name is real before an agent installs it — catches hallucinated 'slopsquat' names and typosquats. Public registry only.

Unclaimed ai-agentsclaudecoding-agentcursormcpmodel-context-protocolsecurityslopsquat
InstallView source
34Low

Scored a month ago · breakdown

About Package Verify MCP

Package Verify MCP is an MCP server in the Agents category: mCP server that verifies an npm package name is real before an agent installs it — catches hallucinated 'slopsquat' names and typosquats. Public registry only.

Install

From source
git clone https://github.com/Anicodeth/package-verify-mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (2)

verify_packageVerdict for one name — **SAFE / CAUTION / SUSPICIOUS / DOES_NOT_EXIST** — from existence, first-publish age, weekly downloads, deprecation, and edit-distance to popular packages (typosquat detection).

Parameters not published.

verify_packagesBatch check — pass every dependency in a proposed change; flagged names sort to the top.

Parameters not published.

Ask AI

✦

Ask AI about Package Verify MCP

Powered by Claude · Grounded in docs

I know everything about Package Verify MCP. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Package Verify MCP

How do I install Package Verify MCP?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Package Verify MCP safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Package Verify MCP still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.