pkg-oracle — Dependency Trust Oracle

Name: pkg-oracle — Dependency Trust Oracle
Author: julian-martin89

@julian-martin89MCP server · External

Blocks typosquatted or hallucinated npm/PyPI packages before an AI agent installs them.

Vulnerability managementv1.0.1

Freeno charge per call

One address for any MCP client. No sign-in needed on this server.

Safety · AI4%Low risk
Does · AIReads1 read · 0 act, by tool name
ConnectRemote · no sign-inStreamable HTTP
PopularityNo stars yetUpdated 3 Sep 2026
StatusAll clearAnswered Odel on 7 Oct

What it does

1 read

Grouped by tool name. At most: only reads or looks up information.

What it costs

Free

Odel charges nothing per call. The publisher may charge for its own service.

Tools

1 · grouped by tool name · checked 7 Oct 2026

Read · 1Look things up

verify_package

Try it in the Inspector

No README yet. What Odel knows about this module is on the right.

Similar modules

Browse Vulnerability management

MCP server: One MCP server.
SafeDep Vet MCP
@safedep · External1,110 GitHub stars.
Protect your AI agents and IDEs from malicious open-source packages.
3% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.Free to use.
3% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.Free to use.
3% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.Free to use.
MCP server: One MCP server.
SkylosRun by its publisher: served from their own domain, namespace checked by the registry.
@duriantaco · External846 GitHub stars.
Dead code, security, secrets detection and code quality for Python, TypeScript, Go.
5% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
5% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
5% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
MCP server: One MCP server.
HOL GuardRun by its publisher: served from their own domain, namespace checked by the registry.
@hashgraph-online · External785 GitHub stars.
Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.
5% chance this is malicious. Assessed by AI, which can make mistakes.Creates or changes data. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
5% chance this is malicious. Assessed by AI, which can make mistakes.Creates or changes data. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
5% chance this is malicious. Assessed by AI, which can make mistakes.Creates or changes data. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
MCP server: One MCP server.
SSH Manager
@bvisible · External502 GitHub stars.
SSH server management for agents, with per-server read-only and allowlist security modes
5% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
5% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
5% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
Canvas
@vishalsachdev · External284 GitHub stars.
Canvas LMS integration for students and educators with optional privacy controls
5% chance this is malicious. Assessed by AI, which can make mistakes.Creates or changes data. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
5% chance this is malicious. Assessed by AI, which can make mistakes.Creates or changes data. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
5% chance this is malicious. Assessed by AI, which can make mistakes.Creates or changes data. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
MCP server: One MCP server.
CrowdStrike Falcon MCP Server
@crowdstrike · External264 GitHub stars.
Connects AI agents with CrowdStrike Falcon for security analysis and automation.
3% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
3% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
3% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
MCP server: One MCP server.
Shodan
@w0h1v · External174 GitHub stars.
MCP server for Shodan API — device search, IP lookup, DNS, and CVE/CPE queries.
7% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
7% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
7% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
Shellward
@jnmetacode · External140 GitHub stars.
AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.
6% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
6% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
6% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.