MCP server: One MCP server.

Dep

@rog0xMCP server · External

License check, outdated deps, security for AI agents

Vulnerability managementv1.0.1TypeScript
Freeno charge per call

Runs on your machine from its package; the steps are below.

What it does

  1. Reads
  2. Writes
  3. High impact

At most: only reads or looks up information.

What it costs

Free

Odel charges nothing per call. The publisher may charge for its own service.

Runs locally over stdio

This server isn't hosted — your MCP client launches it from a package registry. Use one of the commands below, or drop the config into your client (e.g. Claude Desktop).

npm@rog0x/mcp-dep-toolsv1.0.1

Run

npx -y @rog0x/mcp-dep-tools

MCP client config

{
  "mcpServers": {
    "dep": {
      "command": "npx",
      "args": [
        "-y",
        "@rog0x/mcp-dep-tools"
      ]
    }
  }
}
README1 min read

mcp-dep-tools

MCP server providing dependency and package management tools for AI agents. Analyze licenses, find outdated packages, visualize dependency trees, estimate bundle sizes, and audit security vulnerabilities — all from your AI assistant.

Tools

dep_check_licenses

Analyze licenses of all dependencies in a project. Lists each dependency's license type, flags copyleft (GPL) and unknown licenses, and checks for compatibility issues.

dep_find_outdated

Check which dependencies are outdated. Compares installed or specified versions against the latest on npm, categorizes updates as major/minor/patch, and shows how many days since the latest version was published.

dep_analyze_tree

Build and display the dependency tree. Shows direct dependencies and their transitive sub-dependencies, calculates maximum depth, detects circular dependencies, and counts total transitive packages.

dep_analyze_size

Estimate total bundle size from package.json without installing node_modules. Queries the Bundlephobia API for each production dependency to get minified and gzipped sizes.

dep_security_audit

Check dependencies for known security vulnerabilities. Runs npm audit when a lockfile is present, otherwise queries the npm registry advisory API directly. Reports severity levels, affected version ranges, and fix recommendations.

Setup

bash
npm install
npm run build

Usage with Claude Desktop

Add to your Claude Desktop config:

json
{
  "mcpServers": {
    "dep-tools": {
      "command": "node",
      "args": ["path/to/mcp-dep-tools/dist/index.js"]
    }
  }
}

All tools accept a single parameter

  • project_dir (string, required): Absolute path to the project directory containing a package.json.

License

MIT

Similar modules

Browse Vulnerability management