npmscan is an MCP server listed on the M8ven Trust Index. M8ven has not graded it: we have no way to read this server ourselves. No publisher has claimed this listing.

—

Grade unavailable

npmscan

Item: npmscan
Author: M8ven

Security analysis for npm packages, built for AI agents and developer tools. NPMScan helps agents inspect npm packages before installation by checking for: - Suspicious install scripts - Obfuscated or potentially malicious code - Credential and environment-variable access - Network and data-exfiltration indicators - Known vulnerabilities - Maintainer and ownership changes - Risky package updates and version differences Use this MCP server to investigate package risk, compare versions, and mak

0· listed on smithery

How we verified

⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every push why connect →

Who stands behind it

npmscan

Source: Smithery

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Smitherynot scored here

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

This entry was skipped: no github_url and no Tier 1 manifest available

Check MCPs from inside your assistant

Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check

check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern

How to add it →Free · no account needed · works in any MCP client