pkgxray

io.github.adamsjack711-ux/pkgxrayVersion 1.2.2-registry.1

Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.

Status

Responds156 msNov 14, 2026, 14:44 UTCAnswered our handshake without sign-in.

We could not refresh it, so this page shows the last copy.

Data from the official MCP Registry, checked by run.zero. How we check

Streamable HTTP

https://mcp.pkgxray.ca/mcpResponds156 msNov 14, 2026, 14:44 UTC

No sign-in

claude mcp add --transport http pkgxray https://mcp.pkgxray.ca/mcp

1
2
3

Settings > Connectors > Add custom connector
Name: pkgxray
Remote MCP server URL: https://mcp.pkgxray.ca/mcp

{
  "mcpServers": {
    "pkgxray": {
      "url": "https://mcp.pkgxray.ca/mcp"
    }
  }
}

code --add-mcp '{"name":"pkgxray","type":"http","url":"https://mcp.pkgxray.ca/mcp"}'

Streamable HTTP

npm: pkgxray 1.2.1

Package only

claude mcp add pkgxray -- npx -y pkgxray@1.2.1

Built your own server? run.zero hosts MCP servers on European infrastructure.

2 tools

Tools of pkgxray
	Description		Read-only	Idempotent	Open world
`audit_agent_extension_supply_chain`Statically inspect up to 16 KiB across 16 supplied source files. Does not download or execute packages. Results cover only the supplied evidence, not a verified package artifact. Never send credentials or private source without permission.	Statically inspect up to 16 KiB across 16 supplied source files. Does not download or execute packages. Results cover only the supplied evidence, not a verified package artifact. Never send credentials or private source without permission.	No	Yes	Yes	No
`check_npm_package_metadata`Check registry metadata and OSV advisories for one exact public npm version. Does not inspect package source, verify provenance, install or execute code. An advisory-free result is still REVIEW, not installation approval.	Check registry metadata and OSV advisories for one exact public npm version. Does not inspect package source, verify provenance, install or execute code. An advisory-free result is still REVIEW, not installation approval.	No	Yes	Yes	Yes

Registry status: Active
Published: Nov 9, 2026
Updated: Nov 9, 2026
Website: https://pkgxray.ca/⁠ (opens in a new tab)
Repository: https://github.com/adamsjack711-ux/pkgxray⁠ (opens in a new tab)
Categories (suggested): SecuritySuggested categories are assigned automatically from the registry text and may be wrong. Verified operators can correct them.
GDPR: Not declared