protogrid

Search / io.github.mattpicone/upgradelens

UpgradeLens

R0· no sign-in

npm/PyPI package dependency upgrade reviews: security, runtime compatibility, cited migration.

v0.4.8 · active · website · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality100strong
Trust79of 100
Uptime, 30 days95%
Latency p50204 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "upgradelens": {
      "type": "http",
      "url": "https://upgradelens.mattpicone.workers.dev/mcp"
    }
  }
}
claude mcp add --transport http upgradelens https://upgradelens.mattpicone.workers.dev/mcp
[mcp_servers.upgradelens]
url = "https://upgradelens.mattpicone.workers.dev/mcp"
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "upgradelens": {
      "type": "remote",
      "url": "https://upgradelens.mattpicone.workers.dev/mcp",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "upgradelens": {
      "type": "http",
      "url": "https://upgradelens.mattpicone.workers.dev/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=upgradelens&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vdXBncmFkZWxlbnMubWF0dHBpY29uZS53b3JrZXJzLmRldi9tY3AifQ%3D%3D"
}
{
  "servers": {
    "upgradelens": {
      "type": "http",
      "url": "https://upgradelens.mattpicone.workers.dev/mcp"
    }
  }
}
{
  "mcpServers": {
    "upgradelens": {
      "httpUrl": "https://upgradelens.mattpicone.workers.dev/mcp"
    }
  }
}
extensions:
  "upgradelens":
    enabled: true
    name: "upgradelens"
    type: streamable_http
    uri: "https://upgradelens.mattpicone.workers.dev/mcp"
    timeout: 300

Quality 100 / 100strong

protocol100 · weight 25
  • pass
    protocol.modernsupports 2026-07-28 (server/discover)
  • pass
    protocol.statelessanswers without a session
  • pass
    protocol.transportstreamable HTTP
  • pass
    protocol.list_ttltool list is cacheable (ttlMs 3600000)
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene100 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • pass
    tools.description_lengthdescriptions are concise
  • pass
    tools.schemasevery tool has an object input schema
  • pass
    tools.annotations4 of 4 tools declare readOnlyHint or destructiveHint
  • pass
    tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
  • pass
    tools.token_costabout 1,164 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
stability100 · weight 15
  • pass
    stability.changesno tool changes in 30 days
  • pass
    stability.rug_pullno tool changed its meaning under the same name
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

4 tools, about 1,164 tokens to load them all · tool set 93627b64eeab · checked 2026-10-19 10:20 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 79 / 100

no-repository
provenance45
liveness98
freshness100
hygiene80

+website +reachable +uptime-95% +updated-5d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://upgradelens.mattpicone.workers.dev/mcp streamable-httpnoneyes95%204 ms2026-07-28, 2025-11-25, 2025-06-18, 2025-03-262026-10-19

Tools (4)

check_dependency_upgraderead-onlyUse when a coding agent needs a cited go/no-go risk decision without steps before changing an existing npm or PyPI dependency between two exact versions. Returns action_allowed, vulnerability delta, compatibility, EOL, and breaking-change evidence. Use plan_dependency_upgrade instead for ordered migration work. Do not use to choose a target, install a new package, search general docs, or analyze another ecosystem. Read-only and safe to retry.
find_safe_upgrade_targetread-onlyUse only when an existing npm or PyPI dependency has an exact current version but no chosen target. Ranks candidates; candidates are not declared safe and require check_dependency_upgrade or plan_dependency_upgrade. Do not use when a target is stated, for a new install, or as authorization to edit files. Read-only and safe to retry.
plan_dependency_upgraderead-onlyUse when a coding agent needs a migration checklist, refactor actions, ordered review actions, changelog links, or test steps for exact current and target npm/PyPI versions. Use check_dependency_upgrade instead for a go/no-go without steps. Do not use to choose a target, install a package, or provide a general tutorial. Read-only and safe to retry.
review_dependency_upgraderead-onlyUse when an agent reviews a Dependabot, Renovate, npm, or PyPI version change before merge. One cited result combines security delta, runtime compatibility, breaking changes, go/no-go risk, and ordered migration actions for exact current and target versions. Do not use for new installs, unknown versions, general documentation, or other ecosystems. Read-only and safe to retry.

Schemas: list_tools.

Similar MCP servers

Official server.json
{
  "name": "io.github.mattpicone/upgradelens",
  "_meta": {},
  "title": "UpgradeLens",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://upgradelens.mattpicone.workers.dev/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "0.4.8",
  "websiteUrl": "https://upgradelens.mattpicone.workers.dev",
  "description": "npm/PyPI package dependency upgrade reviews: security, runtime compatibility, cited migration."
}