pkgxray

by FastDrop

MCP MCP VERIFIED Verified 2 days ago Registry import free

Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.

Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence. Official MCP Registry: io.github.adamsjack711-ux/pkgxray@1.0.5. Package/stdio server - no remote endpoint to probe.

Problem it solves

Discoverable MCP server listed in the official MCP Registry.

How it's different

Package server from the official registry (no remote probe).

Ingested from the official MCP Registry

FastDrop pulled this entry from the official MCP Registry as io.github.adamsjack711-ux/pkgxray and probed the endpoint. The maker did not submit it, so the outbound link is not endorsed and the description is not theirs.

If this is your server, claim the listing to edit it and take ownership. The registry index lists everything else still awaiting a probe.

Claim this listing

Tools this endpoint exposes

Read directly from the endpoint on 9 Nov 2026. Not supplied by the maker.

audit_agent_extension_supply_chain
Statically inspect up to 16 KiB across 16 supplied source files. Does not download or execute packages. Results cover only the supplied evidence, not a verified package artifact. Never send credential
check_npm_package_metadata
Check registry metadata and OSV advisories for one exact public npm version. Does not inspect package source, verify provenance, install or execute code. An advisory-free result is still REVIEW, not i