Search / io.github.mattpicone/upgradelens
UpgradeLens
R0· no sign-innpm/PyPI package dependency upgrade reviews: security, runtime compatibility, cited migration.
v0.4.8 · active · website · descriptor JSON · versions
Search / io.github.mattpicone/upgradelens
R0· no sign-innpm/PyPI package dependency upgrade reviews: security, runtime compatibility, cited migration.
v0.4.8 · active · website · descriptor JSON · versions
{
"mcpServers": {
"upgradelens": {
"type": "http",
"url": "https://upgradelens.mattpicone.workers.dev/mcp"
}
}
}claude mcp add --transport http upgradelens https://upgradelens.mattpicone.workers.dev/mcp[mcp_servers.upgradelens]
url = "https://upgradelens.mattpicone.workers.dev/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"upgradelens": {
"type": "remote",
"url": "https://upgradelens.mattpicone.workers.dev/mcp",
"enabled": true
}
}
}{
"mcpServers": {
"upgradelens": {
"type": "http",
"url": "https://upgradelens.mattpicone.workers.dev/mcp"
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=upgradelens&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vdXBncmFkZWxlbnMubWF0dHBpY29uZS53b3JrZXJzLmRldi9tY3AifQ%3D%3D"
}{
"servers": {
"upgradelens": {
"type": "http",
"url": "https://upgradelens.mattpicone.workers.dev/mcp"
}
}
}{
"mcpServers": {
"upgradelens": {
"httpUrl": "https://upgradelens.mattpicone.workers.dev/mcp"
}
}
}extensions:
"upgradelens":
enabled: true
name: "upgradelens"
type: streamable_http
uri: "https://upgradelens.mattpicone.workers.dev/mcp"
timeout: 300
protocol.modernsupports 2026-07-28 (server/discover)protocol.statelessanswers without a sessionprotocol.transportstreamable HTTPprotocol.list_ttltool list is cacheable (ttlMs 3600000)auth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptionsevery tool has a descriptiontools.description_lengthdescriptions are concisetools.schemasevery tool has an object input schematools.annotations4 of 4 tools declare readOnlyHint or destructiveHinttools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHinttools.token_costabout 1,164 tokens to load every tooltools.api_dumptools are not a one-to-one API dumpstability.changesno tool changes in 30 daysstability.rug_pullno tool changed its meaning under the same namedeps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI packageNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+website +reachable +uptime-95% +updated-5d-ago -no-repository
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
| remote | auth | reachable | uptime 30d | p50 | protocol | last ok |
|---|---|---|---|---|---|---|
https://upgradelens.mattpicone.workers.dev/mcp streamable-http | none | yes | 95% | 204 ms | 2026-07-28, 2025-11-25, 2025-06-18, 2025-03-26 | 2026-10-19 |
check_dependency_upgraderead-only | Use when a coding agent needs a cited go/no-go risk decision without steps before changing an existing npm or PyPI dependency between two exact versions. Returns action_allowed, vulnerability delta, compatibility, EOL, and breaking-change evidence. Use plan_dependency_upgrade instead for ordered migration work. Do not use to choose a target, install a new package, search general docs, or analyze another ecosystem. Read-only and safe to retry. |
find_safe_upgrade_targetread-only | Use only when an existing npm or PyPI dependency has an exact current version but no chosen target. Ranks candidates; candidates are not declared safe and require check_dependency_upgrade or plan_dependency_upgrade. Do not use when a target is stated, for a new install, or as authorization to edit files. Read-only and safe to retry. |
plan_dependency_upgraderead-only | Use when a coding agent needs a migration checklist, refactor actions, ordered review actions, changelog links, or test steps for exact current and target npm/PyPI versions. Use check_dependency_upgrade instead for a go/no-go without steps. Do not use to choose a target, install a package, or provide a general tutorial. Read-only and safe to retry. |
review_dependency_upgraderead-only | Use when an agent reviews a Dependabot, Renovate, npm, or PyPI version change before merge. One cited result combines security delta, runtime compatibility, breaking changes, go/no-go risk, and ordered migration actions for exact current and target versions. Do not use for new installs, unknown versions, general documentation, or other ecosystems. Read-only and safe to retry. |
Schemas: list_tools.
{
"name": "io.github.mattpicone/upgradelens",
"_meta": {},
"title": "UpgradeLens",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://upgradelens.mattpicone.workers.dev/mcp",
"type": "streamable-http"
}
],
"version": "0.4.8",
"websiteUrl": "https://upgradelens.mattpicone.workers.dev",
"description": "npm/PyPI package dependency upgrade reviews: security, runtime compatibility, cited migration."
}