Deptrust
Unclaimeddeptrust is a CLI that checks package versions for known vulnerabilities across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Packagist, pub.dev, CocoaPods, Hex.pm, Hackage, GitHub Actions, and more. It runs locally as a CLI and as an MCP server, comes with a skill, and a hook.
Install
npx @clidey/deptrust installSet up this server
More in AI & ML
Browse the full directoryUnclaimed listing
Is this your MCP server?
This listing was auto-indexed from the public record. Claim it to edit the page, set compatibility and unlock growth tools. Takes under two minutes.
Claim this serverSecurity profile
Claimed and verified servers get a weekly static scan that shows what the code can reach: external services, environment variables, shell commands, agent configuration folders, plus any dependencies with known advisories. Claim this listing to get one. How the security profile works
Documented tools (3)
From project documentation. A server handshake does not verify each tool’s description or behavior.
check_package
Checks a package version and returns known vulnerabilities plus a recommendation.
compare_versions
Compares a current version and target version, including resolved and added vulnerabilities.
suggest_safe_version
Checks the latest version first. If latest is not allowed, checks provider-reported fixed versions first, then older known versions, and suggests the newest version with an allow recommendation.
Tool change history
FAQ
Questions about Deptrust MCP Server
- How do I connect Deptrust MCP Server to Claude?
- The listing records `npx @clidey/deptrust install` as its setup step. Run it, then follow the repository's instructions for the client configuration; the listing names Claude Code as compatible clients.
- Is Deptrust MCP Server free?
- The listed licence is MIT. Check the upstream terms for permitted use and commercial requirements; a public repository does not by itself mean the software is free or open source. Connected APIs and hosted services may have separate charges.
- What can Deptrust MCP Server do?
- Deptrust MCP Server documents 3 tools to the agent, including check_package, compare_versions, suggest_safe_version. The descriptions above come from project documentation. A live handshake does not test individual tool behavior.