snyk-labs/mcp-server-npm-goof
If you are the rightful owner of mcp-server-npm-goof and would like to certify it and/or have it hosted online, please leave a comment on the right or send an email to dayong@mcphub.com.
This repository provides a Model Context Protocol server designed to fetch npm package information, intended for educational purposes with a focus on MCP Server security.
MCP Server for NPM Package Info
A Model Context Protocol server that provides a tool to fetch npm package information.
Security Disclaimer: this repository is intentionally vulnerable, intended to be used as an educational tool for MCP Server security.
How to use the MCP Server
Define the MCP Server in your Agent MCP configuration, as follows:
{
"servers": {
"npm-and-node-tools": {
"type": "http",
"url": "http://localhost:3500/mcp"
}
},
"inputs": []
}
Features
- Exposes a
getNpmPackageInfotool using MCP - Uses HTTP (Streamable HTTP) transport for remote connections
- Returns structured package information
- Supports session management for stateful connections
Installation
npm install
Usage
Start the server:
npm start
The server will start listening on port 3000 by default. You can customize the port by setting the PORT environment variable:
PORT=3500 npm start
This server is designed to be used with IDE integrations and AI agents that support the Model Context Protocol over HTTP.
Tool: getNpmPackageInfo
Parameters:
packageName(string): The name of the npm package to look up
Returns:
packageInfo(object): JSON object containing all available information about the package
