MCP server

npm MCP server

npm has an official MCP server: Check npm, PyPI and other packages for supply-chain risk before the agent installs them. Below is the server with the setup for 13 clients: Claude Code, Claude Desktop, ChatGPT, Cursor, VS Code, Codex, Gemini CLI and more. Checked 2026-10-24 against each project's own repo, docs and the official MCP Registry.

Socket

Official · SocketRemote

Check npm, PyPI and other packages for supply-chain risk before the agent installs them.

★ 137pushed 2026-10-23MIThttps://mcp.socket.dev/

Run in a terminal, then /mcp inside Claude Code to sign in. Add --scope project to share it via .mcp.json. docs

claude mcp add --transport http socket https://mcp.socket.dev/

FAQ

Is there an official npm MCP server?+

Yes: Socket, maintained by Socket.

How do I connect npm to Claude?+

In Claude Code run: claude mcp add --transport http socket https://mcp.socket.dev/, then /mcp to sign in. In Claude Desktop or claude.ai, go to Customize > Connectors > Add > Add custom connector and paste https://mcp.socket.dev/.

How do I use the npm MCP server in Cursor or VS Code?+

Open the Cursor or VS Code tab on the server above: it has the exact mcp.json entry and a one-click install link. The same server also works in Claude Code, Claude Desktop / claude.ai, ChatGPT, Cursor, VS Code and Codex.

Can I use the npm MCP server in ChatGPT?+

ChatGPT connects to remote MCP servers only. Socket has a hosted URL: at chatgpt.com/plugins choose + > Add custom MCP server, paste the URL and create it as a plugin.

Is it safe to give an AI agent access to npm?+

Start with the official server, a read-only or test account and approval prompts on for anything that writes. Content the agent reads from npm (tickets, messages, pages) can carry prompt-injection instructions, so don't auto-approve actions.

All security MCP servers · Agent skills · How MCP setup works in each client

MCP servers for similar apps: 1Password · Auth0 · Burp Suite · Clerk · Ghidra · HashiCorp Vault · Okta · PyPI · Snyk · Socket · SonarQube · Trivy · WorkOS