Check Package

Last 30 days

Uptime

100%

Response time

469 ms typical, 511 ms slowest 5%

Last check

2 h ago

Next check

any minute now

How to call it

# See the payment challenge (nothing is charged)
curl -i -X POST "https://mcp.dropenginehq.com/api/check-package" \
  -H "content-type: application/json" \
  -d '{"ecosystem":"npm","package":"axios"}'

import { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { ExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

const client = new x402Client().register(
  "eip155:8453",
  new ExactEvmScheme(privateKeyToAccount(process.env.AGENT_KEY)),
);
const pay = wrapFetchWithPayment(fetch, client);

// Not sure it's safe to pay? Preflight it first for $0.005:
// GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Fmcp.dropenginehq.com%2Fapi%2Fcheck-package
const res = await pay("https://mcp.dropenginehq.com/api/check-package", {
  method: "POST",
  headers: { "content-type": "application/json" },
  body: JSON.stringify({"ecosystem":"npm","package":"axios"}),
});
console.log(await res.json());

Example input

{
  "ecosystem": "npm",
  "package": "axios"
}

Example output

{
  "cached": false,
  "checked_at": "2026-09-28T00:00:00.000Z",
  "data_freshness_seconds": 0,
  "degraded": false,
  "dependencies_analyzed": 0,
  "dependency_count": 0,
  "dependency_findings": [],
  "dependency_risk": "low",
  "deprecated": false,
  "ecosystem": "npm",
  "install_script_risk": "low",
  "known_malicious": false,
  "known_vulnerabilities": [],
  "maintainer_count": null,
  "maintainer_risk": "unknown",
  "malicious_confidence": null,
  "new_package": null,
  "package": "axios",
  "package_age_days": null,
  "recommendation": "allow",
  "reputation": "neutral",
  "requested_version": null,
  "resolved_version": "1.7.0",
  "risk_confidence": "medium",
  "risk_level": "low",
  "risk_score": 10,
  "similar_to": null,
  "similarity_score": null,
  "sources": [
    "npm_registry",
    "osv"
  ],
  "success": true,
  "suspicious_scripts": [],
  "typosquat_risk": "low",
  "warnings": []
}

Security scan

• No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.

Recent checks