How do I install NPMScan?

Copy the http config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.

Does NPMScan need an API key?

No required environment variable is listed on this record.

When was NPMScan last checked?

Last checked 2026-11-10. Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups

NPMScan MCP server

Power your agent

Add this server

The publisher's own URL. Not a PlugMCP endpoint.

Add to Cursor Add in Claude Add to VS Code Run on PlugMCP

Host a copy with our keys and logs.

Server URL

https://npmscan.com/api/mcp

The Claude button above opens Claude with the name and URL filled in. You still confirm it there.

shClaude Code

1claude mcp add --transport http io.github.salemalem-npmscan https://npmscan.com/api/mcp

Run in a terminal.

jsonClaude Desktop

1{2  "mcpServers": {3    "io.github.salemalem-npmscan": {4      "command": "npx",5      "args": [6        "-y",7        "mcp-remote",8        "https://npmscan.com/api/mcp"9      ]10    }11  }12}

claude_desktop_config.json

Remote · HTTPPublisher installStep-by-step: add this in Claude

Remote URL or a command on your machine? How the two installs differ

Run on PlugMCP

Host a copy with our keys and logs.

A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.

Launch

Server facts

Remote

Transport: http
Version: 3.1.2
Last checked

Tools

No tool list yet. Remote servers get one after the first health check.

FAQ

NPMScan

Add this server

Host a copy with our keys and logs.

Server facts

Tools

Questions

How do I install NPMScan?

Does NPMScan need an API key?

What transport does NPMScan use?

When was NPMScan last checked?

Documentation