SafeDep Vet MCP Server: Setup for Claude, Cursor and Other Apps

• Checks whether a package version is known malware

  Sends the package to SafeDep's malware analysis service and returns its report, or says no known malware was found.

  Try: “Check lodash 4.17.21 on npm for malware.”

  Network · get_package_version_malware_report

• Lists known vulnerabilities in a package version

  Looks up the package version by its package URL in SafeDep's insights service and returns the vulnerabilities it finds.

  Try: “Does requests 2.31.0 on PyPI have known vulnerabilities?”

  Network · get_package_version_vulnerabilities

• Shows how popular a package version is

  Returns popularity data for the package version, which helps spot look-alike or brand-new packages.

  Try: “How widely used is this package?”

  Network · get_package_version_popularity

• Shows the license of a package version

  Returns the license information that SafeDep holds for the package version.

  Try: “What license does this npm package use?”

  Network · get_package_version_license_info

• Finds the latest version of a package

  Asks the package registry for the newest version. The server instructions say a package with no latest version may be a slopsquatting name made up by an AI.

  Try: “What is the latest version of express?”

  Network · get_package_latest_version

• Lists every published version of a package

  Returns the versions the registry has for the package.

  Try: “Which versions of flask are on PyPI?”

  Network · get_package_available_versions

Watch out for

• Package names are sent to SafeDep

  Each lookup goes to SafeDep's online services, so the packages you check are shared with them. github.com

• The server tells the assistant to always use it

  Its built-in instructions say to always vet a dependency with these tools before using it in generated code. That steers the assistant toward calling them on every package. github.com

• Old versions exposed the web endpoint to DNS rebinding

  A fixed advisory covered the SSE mode. The default stdio mode is not affected, and the current docs list host and origin guards for SSE. github.com

• Optional tools are off by default

  The --sql-query-tool flag adds two tools, vet_query_sql_introspect_schema and vet_query_execute_sql_query, that read a vet report SQLite database you point it at with --sql-query-tool-db-path. The tool description says only SELECT queries are allowed. Leave the flag off unless you need it. github.com

Security advisories