protogrid
Sign inAdd to your agent

Search / io.github.cfgenius145-sketch/cf-package-check

cf-package-check

R0· no sign-in

Abandonment checks for WordPress, npm and PyPI packages, priced per call.

v1.0.0 · active · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality85good
Trust73of 100
Uptime, 30 days95%
Latency p50352 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "cf-package-check": {
      "type": "http",
      "url": "https://packages.cfsoft.us/mcp"
    }
  }
}
claude mcp add --transport http cf-package-check https://packages.cfsoft.us/mcp
[mcp_servers.cf-package-check]
url = "https://packages.cfsoft.us/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "cf-package-check": {
      "type": "remote",
      "url": "https://packages.cfsoft.us/mcp",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "cf-package-check": {
      "type": "http",
      "url": "https://packages.cfsoft.us/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=cf-package-check&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vcGFja2FnZXMuY2Zzb2Z0LnVzL21jcCJ9"
}
{
  "servers": {
    "cf-package-check": {
      "type": "http",
      "url": "https://packages.cfsoft.us/mcp"
    }
  }
}
{
  "mcpServers": {
    "cf-package-check": {
      "httpUrl": "https://packages.cfsoft.us/mcp"
    }
  }
}
extensions:
  "cf-package-check":
    enabled: true
    name: "cf-package-check"
    type: streamable_http
    uri: "https://packages.cfsoft.us/mcp"
    timeout: 300

Quality 85 / 100good

protocol75 · weight 25
  • warn
    protocol.modernnewest supported version is 2025-06-18; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
  • n/a
    protocol.statelessonly applies to 2026-07-28 servers
  • pass
    protocol.transportstreamable HTTP
  • n/a
    protocol.list_ttlonly applies to 2026-07-28 servers
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene86 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • pass
    tools.description_lengthdescriptions are concise
  • pass
    tools.schemasevery tool has an object input schema
  • pass
    tools.annotations2 of 2 tools declare readOnlyHint or destructiveHint
  • fail
    tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: package_sources (destructiveHint, idempotentHint, openWorldHint); package_check (destructiveHint, idempotentHint, openWorldHint)
  • pass
    tools.token_costabout 224 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
stability100 · weight 15
  • pass
    stability.changesno tool changes in 30 days
  • pass
    stability.rug_pullno tool changed its meaning under the same name
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

2 tools, about 224 tokens to load them all · tool set f2f4c6cb4397 · checked 2026-10-19 20:38 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 73 / 100

no-repository
provenance35
liveness98
freshness85
hygiene80

+reachable +uptime-95% ~updated-38d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://packages.cfsoft.us/mcp streamable-httpnoneyes95%352 ms2025-06-182026-10-19

Tools (2)

package_checkread-onlyCheck whether a WordPress.org plugin, npm package or PyPI project is abandoned. Costs $0.02 per call via x402. Returns status (active, stale, abandoned, deprecated or closed), a 0-100 abandonment-risk score, months since the last update, the latest release, and the signals behind the score. Signals, not a verdict: check the project before deciding.
package_sourcesread-onlyList the registry endpoints this service reads, the scoring rules and the cache policy. Free.

Schemas: list_tools.

Similar MCP servers

  • Presend dependency checksR0quality 83
    io.github.presendapp/presend-deps

    Check an npm/PyPI package before an AI agent installs it: 5 focused supply-chain tools.

  • PackageGuardR0quality 79
    io.github.DanKaten/packageguard

    x402-gated safety checker for npm/PyPI packages before you npm install / pip install.

  • Package Health CheckR0quality 95
    app.openkrill/packages

    Check an npm or Python package, or a package.json, for vulnerabilities and upkeep.

  • OSV Dependency Vulnerability CheckR0quality 88
    io.github.fairquery/osv-dependency-vulnerability-check

    Check npm, PyPI, Go and Maven packages or lockfiles against OSV.dev: CVEs, CVSS, fixed versions.

  • NPMScanR0quality 63
    io.github.salemalem/npmscan

    Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups

  • package-metaL0
    io.github.weiseer/package-meta

    npm/PyPI/Cargo package metadata + downloads + maintainer health.

More from io.github.cfgenius145-sketch

  • cf-exclusion-checkR0quality 85
    io.github.cfgenius145-sketch/cf-exclusion-check

    Pay-per-call screening against HHS-OIG LEIE and SAM.gov exclusions.

Official server.json
{
  "name": "io.github.cfgenius145-sketch/cf-package-check",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://packages.cfsoft.us/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "1.0.0",
  "description": "Abandonment checks for WordPress, npm and PyPI packages, priced per call."
}