86trust / 100

Presend dependency checks

by presend.pages.dev in Developer tools

MCP serverPassing, checked 1 h ago

Check an npm/PyPI package before an AI agent installs it: 5 focused supply-chain tools.

https://presend.pages.dev/mcp-deps

Last 30 days

All checks passedSome failedAll failedNot checked
Uptime
100%
Response time
154 ms typical, 154 ms slowest 5%
Last check
1 h ago
Next check
in 5 h

How to call it

Add it to any MCP client that supports remote servers.

{
  "mcpServers": {
    "presend-dependency-checks": {
      "type": "http",
      "url": "https://presend.pages.dev/mcp-deps"
    }
  }
}

5 tools

  • maintainer_change_check

    Publisher-change analysis is npm only. Also reports whether the package exists (found) and its age (first_published, package_age_days, new_package if first published less than 30 days ago), for npm and for PyPI; on PyPI only existence and age are available. Flags a previously uns

  • repo_health_check

    Maintenance signals for a GitHub repository given as owner/name: stars, forks, open issues, license, archived and fork flags, creation date and age, days since last push, topics. Use it to judge whether a dependency looks maintained or abandoned. For an npm or PyPI package whose

  • supply_chain_check

    Call this before installing or adding a package (npm install, pip install, a new entry in a manifest), especially one whose name you recalled or that a model suggested. One-call risk check: combines vulnerability_check (OSV.dev), typosquat_check, maintainer_change_check (npm only

  • typosquat_check

    Call before installing a package whose name you typed or recalled. Checks whether an npm or PyPI package name is a near-miss of a well-known package (typosquatting), with an edit-distance threshold scaled to name length; names of 3 characters or fewer are not fuzzy-matched. Uses

  • vulnerability_check

    Checks a package (optionally a specific version) against OSV.dev for known vulnerabilities: npm, PyPI, Go, crates.io, Maven, RubyGems, Packagist and NuGet. For npm and PyPI, a name that does not exist returns found: false and vulnerable: null, never a clean result. Use supply_cha

Security scan

  • No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.

Recent checks

WhenResultHTTPTime
1 h agoPassed20067 ms
11 h agoPassed200154 ms
22 h agoPassed200217 ms