78trust / 100

Patchwire

by patchwire.monowire.dev in Security & trust

MCP serverPassing, checked 11 h ago

Hourly security advisories for JS, AI and web3 packages: ranges, fixes and exploit conditions.

https://patchwire.monowire.dev/mcp
Tools
5
open to any client
Uptime
100%
last 30 days
Response time
462 ms
1.8 s slowest 5%
Last check
Passed
11 h ago, next any minute now

Scan it nowHow to connect

Reliability

All checks passedSome failedAll failedNot checked

Status and outage history · Atom feed · Watch with other listings

How to connect

Add it to any MCP client that supports remote servers.

{
  "mcpServers": {
    "patchwire": {
      "type": "http",
      "url": "https://patchwire.monowire.dev/mcp"
    }
  }
}

5 tools

  • get_advisories

    Check npm packages for security advisories. Start here before installing, upgrading or deploying: send 1 to 50 package names (never versions) and get, per package, its total and up to 20 advisories of the last 120 days, newest first, each with vulnerable ranges, fixed versions…

  • get_advisory

    Read one advisory in full by id: CVE, GHSA, MAL or Patchwire id, any case, aliases resolve. Returns its ranges, fixed versions, exploit conditions with the source sentence they come from, a summary and the sources. Use it after get_advisories or list_feed gave you an id. An…

  • latest_safe

    Find the version to upgrade to for one npm package. Returns, per release line (major, or minor for 0.x), the version that fixes every known advisory of the last 120 days; a line still affected has safe: null and the ids that keep it affected; a line hit with no fix of its own…

  • list_feed

    List the latest advisories across every tracked stack, newest first, without a package list. Filter by sector (js, stack, ai, crypto) and severity; by default the last 7 days and at most 20 advisories (days 1 to 30, limit 1 to 50). An empty list means nothing matched. To check…

  • get_platform_bulletins

    Get the security bulletins and announced changes of hosting and data platforms, which are not npm packages and never show in a lockfile: Vercel, Supabase, Neon and the other platforms of the platform parameter. Returns up to 50, newest first; omit platform for all of them. For…

Security scan

No findings

We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.

Recent checks

WhenResultHTTPTime
11 h agoPassed200203 ms
22 h agoPassed200487 ms
34 h agoPassed200187 ms
2 days agoPassed200421 ms
3 days agoPassed200287 ms
Show 10 older checks
3 days agoPassed200151 ms
4 days agoPassed200351 ms
4 days agoPassed200462 ms
5 days agoPassed200343 ms
6 days agoPassed200503 ms
6 days agoPassed200372 ms
6 days agoPassed200302 ms
7 days agoPassed200512 ms
8 days agoPassed2001.2 s
8 days agoPassed200270 ms