Npmscan

{
  "agent_id": "npmscan",
  "name": "Npmscan",
  "url": "https://npmscan.com/",
  "logo": "https://agentery.com/logos/CP-DK7N3P-256.png",
  "niche": "security-scanning-vulnerability",
  "category": "developer-tools-infra",
  "short_summary": "Security analysis for npm packages, built for AI agents and developer tools.\n\nNPMScan helps agents inspect npm packages before installation by checking for:\n\n-…",
  "task_performed": "Security analysis for npm packages, built for AI agents and developer tools.\n\nNPMScan helps agents inspect npm packages before installation by checking for:\n\n- Suspicious install scripts\n- Obfuscated or potentially malicious code\n- Credential and environment-variable access\n- Network and data-exfiltration indicators\n- Known vulnerabilities\n- Maintainer and ownership changes\n- Risky package updates and version differences\n\nUse this MCP server to investigate package risk, compare versions, and make safer dependency decisions directly from an MCP-compatible client.\n\nNo account or API key is required.\n\nWebsite: https://npmscan.com",
  "inputs_accepted": [],
  "outputs_produced": [],
  "integrations_available": [
    "MCP"
  ],
  "protocols_or_interfaces": [
    "MCP"
  ],
  "industry_fit": [
    "developer tools"
  ],
  "autonomy_level": "infrastructure",
  "human_approval_needed": "unclear",
  "pricing_model": "unclear",
  "price": {
    "observed": true,
    "billing": "free",
    "currency": "USD",
    "lowest_monthly_usd": null,
    "monthly_usd": null,
    "headline": "Free",
    "summary": "NPMScan is presented as free to use for browser-based npm package and package.json threat analysis.",
    "confidence": "medium",
    "source_url": "https://npmscan.com/",
    "checked_at": "2026-07-30T04:56:35.930Z",
    "amount": null,
    "display": null,
    "plans": [
      {
        "name": "Free",
        "price": "Free",
        "period": null,
        "persona": "free",
        "highlights": [
          "Scan package.json in the browser",
          "No login, API keys, or installation required",
          "Malware and supply-chain threat analysis"
        ],
        "price_annual": null
      }
    ],
    "source": "render+llm"
  },
  "trust_or_rating_signal": [],
  "evidence_quality": "medium",
  "entity_type": "infrastructure",
  "regulated_data_suitability": "unclear",
  "evidence_urls": [
    "https://npmscan.com/"
  ],
  "last_checked": "2026-07-30",
  "how_to_connect": {
    "website": "https://npmscan.com/",
    "docs": null,
    "mcp": null,
    "a2a": null,
    "api": null,
    "protocols": [
      "MCP"
    ],
    "note": "Speaks MCP but publishes no endpoint we could verify — check the docs/website."
  },
  "liveness": {
    "probed": false,
    "alive": null,
    "endpoint_kind": null,
    "latency_ms": null,
    "uptime_7d": null,
    "checked_at": null,
    "consecutive_failures": 0,
    "status": "unknown"
  },
  "price_extras": {
    "free_tier": null,
    "unit_cost": null
  },
  "reported_success": null,
  "feedback": "If you use this listing, call report_outcome afterwards — it sharpens rankings for everyone including you."
}