List your agent

PkgGuard

MCP server · hosted · installable · v0.1.1 · co.youraitools/pkgguard
Online · tested 2h agoNEW · 3h agoNew version 3h agoSeen in the registry 2h ago

Dependency scan for agents: known CVEs and malicious packages via OSV.dev. By Crypto Money Maker

Website ↗How to connect ↓

What it does

PkgGuard is an MCP server, a connector that lets an AI assistant use it as a tool. It can be used hosted (nothing to install) or installed locally.

From the publisher's description, Electra Index matched it to one capability: security scanning. That makes it a candidate for tasks such as scan code for vulnerabilities or review pull requests.

Facts come from the Official MCP Registry, as declared by the publisher. Capabilities are matched automatically (low confidence) and are not a test of the tool.

At a glance

Hosted (remote)YES
Local installYES
Version0.1.1
Packagesnpm
PriceNot in the registry
First seen22 Oct 2026
Last checked2h ago

How to connect

As declared in the Official MCP Registry · hosted endpoint tested by Electra Index 2h ago (live check)

Hosted endpoint

  • https://api.youraitools.co/pkgguard/mcp streamable-http

In Claude Code: claude mcp add --transport http pkgguard https://api.youraitools.co/pkgguard/mcp

Install package

  • NPM @agentgate-builder/pkgguard v0.1.1 · runs locally (stdio)

MCP settings (Claude Desktop, Cursor and other MCP clients)

{
  "mcpServers": {
    "pkgguard": {
      "url": "https://api.youraitools.co/pkgguard/mcp"
    }
  }
}

Live check

Electra Index connected to the hosted endpoint 2h ago

ONLINE PkgGuard answered an MCP connection on 22 Oct 2026 and introduced itself as pkgguard 0.1.1 (MCP protocol 2025-06-18).

2 tools offered to AI assistants

  • scan_dependencies · Checks a package.json, lockfile, requirements.txt, go.mod, Cargo.lock, poetry.lock or composer.lock (or a list of packages) against OSV.dev for known vulnerabilities and confirmed-malicious packages. Free preview tier: verdict and counts, u
  • check_package · Checks one package version (npm, PyPI, Go, crates.io, Packagist, RubyGems, Maven, NuGet) against OSV.dev. Free preview tier: verdict and advisory count. The paid x402 endpoint /v1/package adds advisory ids, severity, CVSS and fixed-in versi

What "online" means: the server answered an MCP connection at the time of the check. It is not a guarantee of security, quality or continuous uptime. How we test: we open an MCP session and ask for the tool list, as an AI assistant would. We never run a tool and never send a key. Checked every few days. Method

Tasks it helps with

Share of each task's required capabilities it covers
Scan code for vulnerabilities
Security Scanning
50%
Review pull requests
Security Scanning
50%

Similar tools

Listed for the same task: scan code for vulnerabilities
  • diffpilotREMOTELOCAL
    MCP server for PR code review, commit messages, changelogs, and secret detection
  • MCP Code Review ServerREMOTELOCAL
    Code review as an MCP server — structured reviews with OWASP security scanning
  • StrixREMOTELOCAL
    AI pentesting: run scans, triage vulnerabilities, review PRs, manage schedules and assets
  • mcp-whoisxmlapiREMOTELOCAL
    34 WHOIS, DNS, IP, threat intelligence, email, and bulk tools for AI agents via WhoisXML API
  • ConnectSecure MCPREMOTELOCAL
    Vulnerability management across all ConnectSecure clients: exposure ranking, CVE impact, blind spots
  • Action1 MCPREMOTELOCAL
    Every Action1 endpoint, plus fleet-wide patch and vulnerability views across all your organizations

Ready-made AI agents

An MCP server is a connector you add to your own assistant. These are finished products that do the same job for you:

Facts & evidence

Each fact shows where it was seen and when.
FactValueEvidenceSourceLast confirmed
Install package@agentgate-builder/pkgguardDECLAREDSRC-001 Official MCP Registry2h ago
Package registriesnpmDECLAREDSRC-001 Official MCP Registry2h ago
Local install (package)yesDECLAREDSRC-001 Official MCP Registry2h ago
Version0.1.1DECLAREDSRC-001 Official MCP Registry2h ago
Hosted endpointhttps://api.youraitools.co/pkgguard/mcpDECLAREDSRC-001 Official MCP Registry2h ago
Remote access (hosted)yesDECLAREDSRC-001 Official MCP Registry2h ago
Websitehttps://youraitools.coDECLAREDSRC-001 Official MCP Registry2h ago
Registry statusactiveDECLAREDSRC-001 Official MCP Registry2h ago
MCP serveryesDECLAREDSRC-001 Official MCP Registry2h ago

Change history

  • CHANGED22 Oct 2026
    local install: no → yes
  • VERSION22 Oct 2026
    0.1.0 → 0.1.1
  • NEW22 Oct 2026
    first seen in the index

Is this page accurate?

Flag it and our robot re-checks the official source. Reports never change a score.

Questions about PkgGuard

How do I connect PkgGuard?

Use the hosted endpoint https://api.youraitools.co/pkgguard/mcp in your assistant's MCP settings. The exact settings are in "How to connect" above, as declared in the Official MCP Registry.

What tools does PkgGuard offer?

When Electra Index connected on 22 Oct 2026, it listed 2 tools: scan_dependencies, check_package. The full list is in "Live check" above.

Is PkgGuard online?

Yes. Its hosted endpoint answered an MCP connection from Electra Index 2h ago.

What can I use PkgGuard for?

Based on its description, it is most relevant to: scan code for vulnerabilities, review pull requests.