Depcheck

dev.kaneky/depcheckVersion 0.2.0

Known vulnerabilities for exact package versions from OSV, with fixes. Paid per call, x402.

Status

Responds323 msNov 14, 2026, 14:26 UTCAnswered our handshake without sign-in.

We could not refresh it, so this page shows the last copy.

Data from the official MCP Registry, checked by run.zero. How we check

Streamable HTTP

https://depcheck.kaneky.dev/mcpResponds323 msNov 14, 2026, 14:26 UTC

No sign-in

claude mcp add --transport http depcheck https://depcheck.kaneky.dev/mcp

1
2
3

Settings > Connectors > Add custom connector
Name: depcheck
Remote MCP server URL: https://depcheck.kaneky.dev/mcp

{
  "mcpServers": {
    "depcheck": {
      "url": "https://depcheck.kaneky.dev/mcp"
    }
  }
}

code --add-mcp '{"name":"depcheck","type":"http","url":"https://depcheck.kaneky.dev/mcp"}'

Built your own server? run.zero hosts MCP servers on European infrastructure.

1 tools

Tools of Depcheck
	Description		Read-only	Idempotent	Open world
`check_packages`Look up the known vulnerabilities affecting exact package versions in the public OSV database (npm, PyPI, Go, Maven, crates.io, RubyGems, NuGet, Packagist, Pub, Hex), 1 to 50 packages per call. Per package: every OSV advisory for that version with its id, CVE/GHSA aliases, summary, severity (database label, CVSS vectors, v3 base scores), the versions that fix it or "no fix published", published/modified dates and a link. Plus a summary: packages checked, packages vulnerable, total advisories and the highest severity. Evidence, not advice: absence from OSV does not prove safety.	Look up the known vulnerabilities affecting exact package versions in the public OSV database (npm, PyPI, Go, Maven, crates.io, RubyGems, NuGet, Packagist, Pub, Hex), 1 to 50 packages per call. Per package: every OSV advisory for that version with its id, CVE/GHSA aliases, summary, severity (database label, CVSS vectors, v3 base scores), the versions that fix it or "no fix published", published/modified dates and a link. Plus a summary: packages checked, packages vulnerable, total advisories and the highest severity. Evidence, not advice: absence from OSV does not prove safety.	Not declared	Not declared	Not declared	Not declared

Registry status: Active
Published: Oct 17, 2026
Updated: Oct 17, 2026
Website: https://depcheck.kaneky.dev/⁠ (opens in a new tab)
Repository: Not given
Categories (suggested): SecuritySuggested categories are assigned automatically from the registry text and may be wrong. Verified operators can correct them.
GDPR: Not declared