Package Intel MCP
Package intelligence for AI agents across npm, PyPI, crates.io and deps.dev. No API keys.
One address for any MCP client. No sign-in needed on this server.
What it does
1 read5 other
Grouped by tool name. At most: only reads or looks up information.
What it costs
FreeOdel charges nothing per call. The publisher may charge for its own service.
Tools
6 · grouped by tool name · checked 7 Oct 2026Read · 1Look things up
- package_search
Other · 5Neither hinted nor named
- package_info
- package_versions
- package_downloads
- package_dependencies
- package_health
Package Intel MCP — by Datakoot
Software supply-chain intelligence for AI agents — as MCP tools your agent can call mid-task, so it can vet a dependency before it installs it. Covers npm, PyPI and crates.io. No API keys.
Tools
| Tool | What it does | Source |
|---|---|---|
package_info | Metadata for a package: description, latest version, license, homepage & repo links | npm / PyPI / crates.io |
package_versions | Full version history with release dates | npm / PyPI / crates.io |
package_downloads | Download counts and popularity signal | npm / PyPI / crates.io |
package_dependencies | Direct dependencies for a given version | deps.dev |
package_health | Health signals: OpenSSF Scorecard, stars, dependents | deps.dev |
package_search | Search for packages by keyword | npm / PyPI / crates.io |
Every tool accepts an ecosystem of npm, pypi, or crates. No API keys required.
Quick start
claude mcp add --transport http package-intel https://package.datakoot.com/mcp
Or point any MCP client at https://package.datakoot.com/mcp.
Try it in 10 seconds — no key, no signup
Paste this into a terminal:
curl -s https://package.datakoot.com/mcp \
-H 'content-type: application/json' \
-H 'accept: application/json, text/event-stream' \
-d '{"jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": {"name": "package_health", "arguments": {"ecosystem": "npm", "name": "express"}}}'
You get a supply-chain health snapshot for the npm package express — versions, downloads, dependencies, maintenance signals — no API key, nothing to sign up for.
Or point any MCP client at the URL and just ask your agent, in plain language:
- "How healthy is the npm package
express?" - "Before I add
left-pad, is it actively maintained and widely used?"
Data & attribution
Data comes from the public registry APIs for npm, PyPI and crates.io, plus deps.dev (Google Open Source Insights, CC-BY 4.0) for dependency graphs and OpenSSF Scorecard health signals. Package data is served from official public APIs and is informational.
Part of Datakoot — keyless intelligence APIs for AI agents.
