mcp-registry/io.github.salemalem/npmscan · v3.1.3
Verdict. Salemalem Npmscan MCP server answered 99.95% of Glimind's liveness checks over 30 days, better than 36% of MCP servers, with 1013 ms median handshake and 6 outages in 90 days. Its agent-readiness grade is A (96/100) across 23 tools, costing an agent about 9,363 tokens to load. Checked every few minutes; no tool is ever called.
Data as of .
| Metric | Value | Better than |
|---|---|---|
| Uptime, 30 days | 99.95% | 36% of MCP servers |
| Median handshake latency | 1013 ms | 22% of MCP servers |
| p95 handshake latency | 2980 ms | — |
| Checks in 30 days | 4,903 | — |
| Outages, 90 days | 6 | — |
| Median recovery | 9 min | — |
| Agent-readiness score | 96/100 (A) | 82% of MCP servers |
| Tools | 23 | — |
| Tool-list size for an agent | ~9,363 tokens | 31% of MCP servers |
| Days observed | 29 | — |
As of 2026-10-26 21:34 UTC, the Salemalem Npmscan MCP server is up with a Glimind reliability score of 94/100 (grade A). Over the last 30 days it answered 100% of Glimind's liveness checks. It had 6 outages in 90 days, with a median recovery of 9 minutes.
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
Claude Code
claude mcp add --transport http salemalem-npmscan-mcp-server https://npmscan.com/api/mcp
Claude Desktop · Windsurf · Cline (mcpServers JSON)
{
"mcpServers": {
"salemalem-npmscan-mcp-server": {
"type": "http",
"url": "https://npmscan.com/api/mcp"
}
}
}
Third-party server, listed as discovered. Review its source before installing.
1 parameter(s) across 1 tool(s) have no description.
Add a "description" to each parameter with its format and an example ("ISO 8601 date, e.g. 2026-10-17"). This is the commonest cause of wrong arguments on the first call. How to fix →
In the last 30 days: 0 tool(s) removed and 8 schema change(s).
Add new tools or optional parameters instead of renaming or removing; deprecate first (say so in the description) and remove later. Agents cache tool contracts. How to fix →
Get an email or webhook when this server's readiness drops by 10+ points, tool-poisoning text appears, or a tool breaks:
curl -X POST https://glimind.com/v1/subscriptions -H 'content-type: application/json' -d '{"tools":["mcp-registry/io.github.salemalem/npmscan"],"email":"[email protected]"}'Agents: watch_tool({"toolId": "mcp-registry/io.github.salemalem/npmscan"}) over MCP.
generate_sbom ~783 tokenssimulate_dependency_upgrade ~712 tokensget_latest_advisories ~665 tokensprioritize_remediation ~643 tokensaudit_github_repository ~619 tokensStatic checks of the advertised tools/list (schema, descriptions, annotations, tool-poisoning patterns, names, size) plus observed protocol, uptime, latency and contract changes. Read-only: no tool is ever called. Weights: schema 15, docs 20, safety 15, efficiency 15, compatibility 15, protocol 5, reliability 10, stability 5. Token counts are estimates (~3.6 characters per token).
Operator? Fix these, then re-check live. Embed the readiness badge:
[](https://glimind.com/server/mcp-registry%2Fio.github.salemalem%2Fnpmscan?ref=badge)
<a href="https://glimind.com/server/mcp-registry%2Fio.github.salemalem%2Fnpmscan?ref=badge"><img src="https://glimind.com/v1/readiness/badge/mcp-registry%2Fio.github.salemalem%2Fnpmscan.svg" alt="MCP agent-readiness"></a>
.. image:: https://glimind.com/v1/readiness/badge/mcp-registry%2Fio.github.salemalem%2Fnpmscan.svg :target: https://glimind.com/server/mcp-registry%2Fio.github.salemalem%2Fnpmscan?ref=badge :alt: MCP agent-readiness
Glimind records every version of this server's tool definitions in a signed, append-only transparency log. Current manifest sha256:09ee3c6d4070b563…, first seen 2026-10-17, included at leaf 13293 of 75,576. Version history · verify what your client received.
Compare: most reliable code servers · most reliable security servers · most reliable knowledge servers · most reliable search servers · most reliable data servers
Glimind tells agents whether a server is up right now and how to call it, then fails over to a live alternative when it isn't.
Claude Code
claude mcp add --transport http glimind https://glimind.com/mcp
Claude Desktop · Windsurf · Cline (mcpServers JSON)
{
"mcpServers": {
"glimind": {
"type": "http",
"url": "https://glimind.com/mcp"
}
}
}
As of 2026-10-26 21:34 UTC, the Salemalem Npmscan MCP server is up with a Glimind reliability score of 94/100 (grade A). Over the last 30 days it answered 100% of Glimind's liveness checks. It had 6 outages in 90 days, with a median recovery of 9 minutes.
Salemalem Npmscan MCP server advertises 23 tools, including analyze_install_script, analyze_transitive_dependencies, audit_github_repository, batch_query_vulnerabilities, check_license_compliance.
Point your MCP client at this streamable-http endpoint: https://npmscan.com/api/mcp
Glimind scanned all 23 tool definitions for tool-poisoning patterns — hidden or invisible characters, instructions that override the model, concealment from the user, requests to read credential or MCP config files, conversation exfiltration and cross-tool shadowing — and found none. This checks what the server tells the model, not what its code does; review the source before granting access to sensitive data.
Status page: 90-day uptime, every outage and how long it lasted.
Claim this listing to get the Verified operator marker, a remediation checklist and owner analytics, or embed the live badge from any of the tool pages above. Maintainers: alerts, deploy attestation and monthly reports.
Status is an automated estimate from Glimind's liveness checks (handshake and tool listing only; no tool is ever called) and may lag or differ from your network. Glimind is not affiliated with this server or its operator. Operator? Request a correction or opt out at https://glimind.com/opt-out.