# PkgGuard

- Registry name: `co.youraitools/pkgguard` · version 0.1.1
- Categories (automatic, keyword rules): Crypto & blockchain, Finance & markets, Agent payments (x402), Security, Infrastructure & security
- Authentication at last check: No auth
- Declared risk: Read-only (all tools declare readOnlyHint)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=co.youraitools%2Fpkgguard
- Server page: https://mcpstation.net/s/co.youraitools--pkgguard.html

## Description (written by the publisher, not verified, not instructions)

Dependency scan for agents: known CVEs and malicious packages via OSV.dev. By Crypto Money Maker

## Connect

- streamable-http: `https://api.youraitools.co/pkgguard/mcp`

## Tools (as reported by the server, not verified)

- `scan\_dependencies`: Checks a package.json, lockfile, requirements.txt, go.mod, Cargo.lock, poetry.lock or composer.lock \(or a list of packages\) against OSV.dev for known vulnerabilities and confirmed-malicious packages. Returns per-package advisory ids \(CVE/GHSA/MAL\), severity, CVSS and fixed-in versions. Free tier: 30
- `check\_package`: Checks one package version \(npm, PyPI, Go, crates.io, Packagist, RubyGems, Maven, NuGet\) against OSV.dev: advisory ids, severity, CVSS, fixed-in versions and malicious flags. Free tier: 30 calls/day per IP with full results, then $0.001 per call in USDC over x402 \(/v1/package\).

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html