How do I connect Depguard MCP Server to Claude?

Run `claude mcp add depguard -- npx -y depguard-cli audit express` in Claude Code, or add the same command and arguments under mcpServers in Cursor's mcp.json or Claude Desktop's claude_desktop_config.json, then restart the client. The blocks above are ready to paste.

Is Depguard MCP Server free?

The listed licence is Apache-2.0. Check the upstream terms for permitted use and commercial requirements; a public repository does not by itself mean the software is free or open source. Connected APIs and hosted services may have separate charges.

What can Depguard MCP Server do?

Depguard MCP Server documents 14 tools to the agent, including depguard_audit, depguard_audit_bulk, depguard_audit_deep. The descriptions above come from project documentation. A live handshake does not test individual tool behavior.

Depguard

Unclaimed

by mopanc

Audit npm packages for security, maintenance, licenses and dependencies. Recommends install or write-from-scratch.

Set up this server

Compare servers My Stack

01 / Choose your client

02 / Before you connect

Authentication is not specified. Check the project instructions before connecting.

Install the runtime required by the project and make it available to your client.

Project instructionsEnvironment variable names (optional)

Use names from the project instructions, separated by commas. Enter names only, never secret values.

03 / Add the configuration

Source: generated from public install instructions

claude mcp add --transport stdio 'depguard' -- 'npx' '-y' 'depguard-cli' 'audit' 'express'

Run in your terminal after replacing any placeholders.

04 / Check it in your client

Open your client’s MCP settings and confirm the server connects and lists its tools. A copied configuration does not confirm a working connection.

Is this your MCP server?

This listing was auto-indexed from the public record. Claim it to edit the page, set compatibility and unlock growth tools. Takes under two minutes.

Claim this server

Security profile

Claimed and verified servers get a weekly static scan that shows what the code can reach: external services, environment variables, shell commands, agent configuration folders, plus any dependencies with known advisories. Claim this listing to get one. How the security profile works

14 of 14 tools

Documented tools (14)

From project documentation. A server handshake does not verify each tool’s description or behavior.

depguard_audit

Deep dive on one package (vulnerabilities + static code analysis + install scripts)

depguard_audit_bulk

Compare A vs B vs C in one call

depguard_audit_deep

Full transitive tree audit for one package

depguard_audit_project

Audit a whole project — direct deps, transitives via lockfile, packageManager field

depguard_audit_workspace

Just cloned a repo, before opening it in any IDE. Lists files that auto-execute on workspace open (VS Code tasks runOn:folderOpen, devcontainer lifecycle, .envrc, JetBrains run configs, Makefile, .gitattributes, committed git hooks). Defends against fake-interview / take-home-test malware.

depguard_guard

About to install package Y → pre-install verify + audit + allow/warn/block

depguard_remediate

"100 vulnerabilities, which 5 direct deps do I bump?" — groups transitives by parent, sorted by severity weight

depguard_review

AI code review — detect debris left by AI agents (console.logs, empty catch, broken imports, orphan files)

depguard_sbom

Generate a CycloneDX 1.6 SBOM (EU CRA, US EO 14028, SOC 2, FedRAMP)

depguard_score

Score 0-100 for one package

depguard_search

Search npm by keywords, ranked by depguard score

depguard_should_use

Need functionality X → recommend install / use-native / write-from-scratch

depguard_sweep

Find unused dependencies in a project

depguard_verify

AI hallucination guard — does this package exist? Is it a typosquat?

Tool change history

Compared across complete checks of the same configuration. Tools were listed, not invoked. Input-schema changes are not measured here.

No complete tool checks yet.

FAQ

Questions about Depguard MCP Server

How do I connect Depguard MCP Server to Claude?: Run `claude mcp add depguard -- npx -y depguard-cli audit express` in Claude Code, or add the same command and arguments under mcpServers in Cursor's mcp.json or Claude Desktop's claude_desktop_config.json, then restart the client. The blocks above are ready to paste.
Is Depguard MCP Server free?: The listed licence is Apache-2.0. Check the upstream terms for permitted use and commercial requirements; a public repository does not by itself mean the software is free or open source. Connected APIs and hosted services may have separate charges.
What can Depguard MCP Server do?: Depguard MCP Server documents 14 tools to the agent, including depguard_audit, depguard_audit_bulk, depguard_audit_deep. The descriptions above come from project documentation. A live handshake does not test individual tool behavior.