mcp-server-npm-plus

npm package research from your AI assistant. Search packages, check bundle sizes, scan for vulnerabilities, compare download counts, and inspect dependency trees. No API keys needed.

bash

npx mcp-server-npm-plus

Works with Claude Desktop, Cursor, VS Code Copilot, and any MCP client. Uses public npm registry APIs.

MCP server for npm package search, bundle size, and vulnerability scanning

_{Demo built with remotion-readme-kit}

Why

Choosing between npm packages usually means opening a bunch of browser tabs: npm for package info, Bundlephobia for size, Snyk for vulnerabilities, npm trends for download comparisons. This server puts all of that in one place, accessible through your AI assistant. Ask "compare zustand vs jotai vs valtio" and get download numbers, bundle sizes, and dependency counts side by side. Ask "are there any known vulnerabilities in express?" and get the answer without leaving your editor. It uses only public npm APIs, so there's nothing to sign up for.

Tools

Tool	Description
`search`	Search npm packages by query
`package_info`	Get detailed info: description, license, repo, dependencies
`downloads`	Get download stats for a package
`compare_downloads`	Compare download counts across multiple packages
`bundle_size`	Get bundle size (minified + gzip) via Bundlephobia
`vulnerabilities`	Get vulnerability info and advisory links
`dependency_tree`	Show direct dependencies as a tree
`download_trends`	Daily breakdown with sparkline

Quick Start

Cursor

Add to .cursor/mcp.json:

json

{
  "mcpServers": {
    "npm-plus": {
      "command": "npx",
      "args": ["mcp-server-npm-plus"]
    }
  }
}

Claude Desktop

Add to claude_desktop_config.json:

json

{
  "mcpServers": {
    "npm-plus": {
      "command": "npx",
      "args": ["mcp-server-npm-plus"]
    }
  }
}

VS Code

Use the MCP extension and configure the server with npx mcp-server-npm-plus.

Example Prompts

"Search npm for React state management libraries"
"What's the bundle size of lodash?"
"Compare downloads of zustand vs jotai vs valtio"
"Check for vulnerabilities in express"
"Show me the dependency tree for next"
"What are the download trends for typescript this month?"

Development

bash

npm install
npm run typecheck
npm run build
npm test
npm run lint
npm run format

Author

_{README built with README Builder}

Npm Plus

What it does

What it costs