@modelcontextprotocol/server
Model Context Protocol implementation for TypeScript - Server package
88%
Total Score
healthy
Active releases, a maintained organization-backed repository, and provenance support this package; workflow pinning and license metadata need attention.
Health Score Breakdown
The package declares Apache-2.0 and includes a license file, but artifact detection also found MIT and CC-BY-4.0 text not covered by the declaration, creating a minor licensing-clarity concern.
All 7 workflows were analyzed with no untrusted checkouts or script injection, and 3 use job-level or read-only permissions. However, 27 of 42 action references are unpinned, and high-confidence adhoc-packages plus use-trusted-publishing findings leave meaningful workflow hygiene concerns; the low-confidence cache finding is minor.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 zod Version ^4.2.0 | — | — |
@modelcontextprotocol/core Version 2.3.1 | — | — |
Weekly Downloads
Info
- Last Published
- 10 days ago
- Created
- 6 months ago
- Unpacked Size
- 6.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.