io.github.YawLabs/npmjs-mcpdev-tools

npmjs-mcp

Verified · today

npm registry MCP server — package intelligence, security audits, dependency analysis

Install

claude mcp add npmjs-mcp -- npx -y @yawlabs/[email protected]

Our take

A serious npm-registry MCP server with reads, security checks, provenance, org/team access, webhooks, and guarded write operations. It is careful about write safety with confirmations, token checks, and tool annotations, but users should still treat it as an administrative npm client when `NPM_TOKEN` is configured. The registry listing omits the repository URL even though the package points to a public repo.

reviewed by hand · 2026-07-06

Something wrong or dead here? Report it

Verification record

last verified: today
npm: @yawlabs/npmjs-mcp
downloads / wk: 194
latest version: 0.12.1
in registry since: 2026-06-07