Home › Security › pkgxray

pkgxray

Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.

JavaScript

★ 11 stars Last pushed 2026-08-19 License: MIT

View repository → Website →

Connect

Review any command before running it. Package names and URLs come from the server's own registry entry.

npx -y [email protected]

Or add to your MCP client config:

{
  "mcpServers": {
    "pkgxray": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}

This server takes extra arguments — see its repository.

MCP server for IDA Pro, allowing you to perform binary analysis with AI assistants. This plugin implement decompilation, disassembly and…

A Model Context Protocol server for Ghidra that enables LLMs to autonomously reverse engineer applications. Provides tools for decompiling…

JADX-AI-MCP is a plugin and MCP Server for the JADX decompiler that integrates directly with Model Context Protocol (MCP) to provide live…

Beelzebub is a honeypot framework that lets you build honeypot tools using MCP. Its purpose is to detect prompt injection or malicious…

Protect your AI agents and IDEs from malicious open-source packages.

Dead code, security, secrets detection and code quality for Python, TypeScript, Go.

Data from the Official MCP Registry