Package Guard Mcp
- Updated July 5, 2026
- mlawsonking/MCP
Supply-chain guard for coding agents: verifies packages, checks for vulnerabilities and malware, and detects typosquats before install.
About
Package Guard MCP is a supply-chain guard for AI coding agents. Before a dependency is installed, it verifies the package, checks it for known vulnerabilities and malware, and detects typosquats that mimic popular names. A solo builder adds it so an autonomous agent cannot silently pull a malicious or compromised package into their project.
- Verifies packages before install
- Checks vulns and malware
- Detects typosquatting attacks
- Supply-chain guardrail for agents
Package Guard Mcp by the numbers
- Data as of Jul 7, 2026 (Skillselion catalog sync)
claude mcp add package-guard-mcp -- npx -y package-guard-mcpAdd your badge
Show developers this MCP server is listed on Skillselion. Paste this into your README.
| Package | package-guard-mcp |
|---|---|
| Transport | STDIO |
| Auth | None |
| Last updated | July 5, 2026 |
| Repository | mlawsonking/MCP ↗ |
What it does
Supply-chain guard for coding agents: verifies packages, checks for vulnerabilities and malware, and detects typosquats before install.
Who is it for?
Agents that install dependencies autonomously
Skip if: Runtime application firewalling
What you get
- package safety verdict
Recommended MCP Servers
1Claw VaultHSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.2
1passwordMCP server for 1Password service accounts — tools and resources for vaults and credentials18
402sentinel McpAssess an x402 counterparty's risk BEFORE paying: allow/review/block, scored on-chain (Base).1
A2adependencyinspector McpRemote MCP for A2A dependency inspector MCP, structured receipts, audit logs, and reviewer-ready evi
A2a Governance Bridge McpA2A Governance Bridge MCP server.A2aidentitytoll McpRemote MCP for A2A caller identity, scope policy, verdict receipts, and audit history.