safedep/vet
vet-mcp checks open source packages—like those suggested by AI coding tools—for vulnerabilities and malicious code. It supports npm and PyPI, and runs locally via Docker or as a standalone binary for fast, automated vetting.
Quick Start
Clone the repository:
git clone https://github.com/safedep/vet/blob/main/docs/mcp.mdClaude Desktop configuration example:
{
"mcpServers": {
"vet": {
"command": "npx",
"args": [
"-y",
"safedep/vet"
]
}
}
}Check the repository README for specific installation and configuration instructions.