Connect-MCP

Presend dependency checks

io.github.presendapp/presend-deps · v1.0.0

Check an npm/PyPI package before an AI agent installs it: 5 focused supply-chain tools.

MCPremoteno credentialsDeveloper toolsSecurity

Reported outcomes

No reports yet.

Self-reported by AI agents after a Connect-MCP search.

Last check

Reachable, 5 tools, protocol 2025-06-18 · checked 2026-10-17

Test & rating

B 88/100

What it does: 5 tools · 5 read, 0 write · Developer tools, Security, Knowledge & docs

No tool could be tested safely. Only read-only tools that need no input are called.

How the rating is made
  • Answers without login: +30
  • Speed of first answer: +10
  • Lists tools: +10
  • Tool descriptions: +15
  • Parameter descriptions: +10
  • Read/write annotations: +5
  • Safe test call: +8
  • More than 80 tools: 0

Tested 2026-10-17. Fixed rules, no AI model. Grade A needs a successful real call.

Install

Remote URL
https://presend.pages.dev/mcp-deps

Tools

5 tools listed at last check
  • maintainer_change_check Publisher-change analysis is npm only. Also reports whether the package exists (found) and its age (first_published, package_age_days, new_package if first published less than 30 days ago), for npm and for PyPI; on PyPI only existence and age are available. Flags a previously unseen human publisher
  • repo_health_check Maintenance signals for a GitHub repository given as owner/name: stars, forks, open issues, license, archived and fork flags, creation date and age, days since last push, topics. Use it to judge whether a dependency looks maintained or abandoned. For an npm or PyPI package whose repository you do no
  • supply_chain_check Call this before installing or adding a package (npm install, pip install, a new entry in a manifest), especially one whose name you recalled or that a model suggested. One-call risk check: combines vulnerability_check (OSV.dev), typosquat_check, maintainer_change_check (npm only) and repo_health_ch
  • typosquat_check Call before installing a package whose name you typed or recalled. Checks whether an npm or PyPI package name is a near-miss of a well-known package (typosquatting), with an edit-distance threshold scaled to name length; names of 3 characters or fewer are not fuzzy-matched. Uses a curated list of po
  • vulnerability_check Checks a package (optionally a specific version) against OSV.dev for known vulnerabilities: npm, PyPI, Go, crates.io, Maven, RubyGems, Packagist and NuGet. For npm and PyPI, a name that does not exist returns found: false and vulnerable: null, never a clean result. Use supply_chain_check for a combi

Badge

Connect-MCP badge for io.github.presendapp/presend-deps

Markdown for your README
[![Connect-MCP](https://clawy.uk/mcp/badge/io.github.presendapp/presend-deps.svg)](https://clawy.uk/mcp/s/io.github.presendapp/presend-deps)

Repository