MCP server trust card
npm MCP Server
zueai · recorded version or snapshot 0.1.0
npm MCP — search npm packages, read package metadata, check vulnerabilities, view changelogs, and compare package statistics.
Metadata reviewed No listed warning
Source and identity
- Publisher
- zueai
- Namespace
- Not recorded
- Recorded version / snapshot
- 0.1.0
- License
- Not recorded
- Artifact SHA-256
- Not recorded — a source snapshot alone does not pin an artifact
- Canonical listing
- https://github.com/zueai/npm-mcp-server
Declared access
Review every permission against your own environment and least-privilege policy.
- read:npm-registry
Required secrets
Generated examples use placeholders. Never paste real secrets into ToolDix.
No required secrets are declared in the current metadata.
Compatibility and connection
Clients
- Codex
- Claude
- Cursor
- OpenClaw
Runtimes
- node
Transports
- stdio
Authentication
No authentication method is recorded.
Evidence
- Canonical source
canonical · observed Jul 15, 2026