NPM Plus MCP Server

1

Add it to Claude Code

Run this in a terminal.

Run in terminal
claude mcp add npm-plus -- npx mcp-server-npm-plus
README.md

Search packages, check bundle sizes, scan vulnerabilities, and compare downloads.

mcp-server-npm-plus

npm package research from your AI assistant. Search packages, check bundle sizes, scan for vulnerabilities, compare download counts, and inspect dependency trees. No API keys needed.

npx mcp-server-npm-plus

Works with Claude Desktop, Cursor, VS Code Copilot, and any MCP client. Uses public npm registry APIs.

MCP server for npm package search, bundle size, and vulnerability scanning

Demo built with remotion-readme-kit

Why

Choosing between npm packages usually means opening a bunch of browser tabs: npm for package info, Bundlephobia for size, Snyk for vulnerabilities, npm trends for download comparisons. This server puts all of that in one place, accessible through your AI assistant. Ask "compare zustand vs jotai vs valtio" and get download numbers, bundle sizes, and dependency counts side by side. Ask "are there any known vulnerabilities in express?" and get the answer without leaving your editor. It uses only public npm APIs, so there's nothing to sign up for.

Tools

Tool Description
search Search npm packages by query
package_info Get detailed info: description, license, repo, dependencies
downloads Get download stats for a package
compare_downloads Compare download counts across multiple packages
bundle_size Get bundle size (minified + gzip) via Bundlephobia
vulnerabilities Get vulnerability info and advisory links
dependency_tree Show direct dependencies as a tree
download_trends Daily breakdown with sparkline

Quick Start

Cursor

Add to .cursor/mcp.json:

{
  "mcpServers": {
    "npm-plus": {
      "command": "npx",
      "args": ["mcp-server-npm-plus"]
    }
  }
}

Claude Desktop

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "npm-plus": {
      "command": "npx",
      "args": ["mcp-server-npm-plus"]
    }
  }
}

VS Code

Use the MCP extension and configure the server with npx mcp-server-npm-plus.

Example Prompts

  • "Search npm for React state management libraries"
  • "What's the bundle size of lodash?"
  • "Compare downloads of zustand vs jotai vs valtio"
  • "Check for vulnerabilities in express"
  • "Show me the dependency tree for next"
  • "What are the download trends for typescript this month?"

Development

npm install
npm run typecheck
npm run build
npm test
npm run lint
npm run format

See also

More MCP servers and developer tools on my portfolio.

Author


README built with README Builder

License

MIT © 2026 Ofer Shapira

Tools (8)

searchSearch npm packages by query
package_infoGet detailed info: description, license, repo, dependencies
downloadsGet download stats for a package
compare_downloadsCompare download counts across multiple packages
bundle_sizeGet bundle size (minified + gzip) via Bundlephobia
vulnerabilitiesGet vulnerability info and advisory links
dependency_treeShow direct dependencies as a tree
download_trendsDaily breakdown with sparkline

Configuration

claude_desktop_config.json
{"mcpServers": {"npm-plus": {"command": "npx", "args": ["mcp-server-npm-plus"]}}}

Try it

Search npm for React state management libraries
What's the bundle size of lodash?
Compare downloads of zustand vs jotai vs valtio
Check for vulnerabilities in express
Show me the dependency tree for next

Frequently Asked Questions

What are the key features of NPM Plus?

Search npm packages directly from your AI assistant. Retrieve detailed package metadata and dependency trees. Check bundle sizes using Bundlephobia data. Scan for known security vulnerabilities in packages. Compare download statistics and trends across multiple packages.

What can I use NPM Plus for?

Quickly evaluating the popularity and health of a new library before adding it to a project. Comparing the bundle size impact of different state management solutions. Auditing project dependencies for known security vulnerabilities. Analyzing download trends to identify stable and widely-adopted packages.

How do I install NPM Plus?

Install NPM Plus by running: npx mcp-server-npm-plus

What MCP clients work with NPM Plus?

NPM Plus works with any MCP-compatible client including Claude Desktop, Claude Code, Cursor, and other editors with MCP support.

Turn this server into reusable context

Keep NPM Plus docs, env vars, and workflow notes in Conare so your agent carries them across sessions.

Need the old visual installer? Open Conare IDE.
Open Conare