mcp-server-npm-goof

snyk-labs/mcp-server-npm-goof

3.3

If you are the rightful owner of mcp-server-npm-goof and would like to certify it and/or have it hosted online, please leave a comment on the right or send an email to henry@mcphub.com.

This repository provides a Model Context Protocol server designed to fetch npm package information, intended for educational purposes with a focus on MCP Server security.

Tools
1
Resources
0
Prompts
0

MCP Server for NPM Package Info

A Model Context Protocol server that provides a tool to fetch npm package information.

Security Disclaimer: this repository is intentionally vulnerable, intended to be used as an educational tool for MCP Server security.

Features

  • Exposes a getNpmPackageInfo tool using MCP
  • Uses STDIO transport for IDE integrations (like Cursor)
  • Returns structured package information

Installation

npm install

Usage

Start the server:

npm start

This server is designed to be used with IDE integrations like Cursor that support the Model Context Protocol.

Tool: getNpmPackageInfo

Parameters:

  • packageName (string): The name of the npm package to look up

Returns:

  • packageInfo (object): JSON object containing all available information about the package