deps-dev-mcp 1.0.0

package/README.md

@@ -0,0 +1,20 @@
+# Deps.dev MCP
+
+Open source dependency metadata from the public Google deps.dev API. No key required.
+
+This file is self contained. It reads public data only and never writes to the machine. All output is bounded and honest about what could not be fetched.
+
+## Tools
+
+
+* `info`  Data for one package.
+
+## Usage
+
+```bash
+npm install
+npm run build
+node dist/index.js
+```
+
+Data comes from the public deps.dev API.

package/dist/api.js

@@ -0,0 +1,31 @@
+const BASE = 'https://api.deps.dev/v3/systems';
+export async function info(args) {
+    const system = (args.system ?? '').trim().toLowerCase();
+    const name = (args.name ?? '').trim();
+    if (!system || !name)
+        return 'Provide an ecosystem (npm, pypi, maven, cargo) and a package name.';
+    const version = (args.version ?? '').trim();
+    const url = version
+        ? `${BASE}/${encodeURIComponent(system)}/packages/${encodeURIComponent(name)}/versions/${encodeURIComponent(version)}`
+        : `${BASE}/${encodeURIComponent(system)}/packages/${encodeURIComponent(name)}`;
+    const res = await fetch(url, {
+        headers: { 'User-Agent': 'mrfentmen-deps-dev-mcp/1.0', Accept: 'application/json' },
+        signal: AbortSignal.timeout(20000),
+    });
+    if (!res.ok)
+        throw new Error(`deps.dev returned ${res.status}`);
+    const d = (await res.json());
+    const s = (k) => (d[k] != null ? String(d[k]) : '');
+    const str = (k) => {
+        const v = d[k];
+        if (Array.isArray(v))
+            return v.slice(0, 10).map((x) => (x && typeof x === 'object' ? JSON.stringify(x).slice(0, 80) : String(x))).join(', ');
+        return v != null ? String(v) : '';
+    };
+    return [
+        `${s('name')}${s('version') ? ` ${s('version')}` : ''}`,
+        s('description') ? `Desc: ${s('description').slice(0, 120)}` : '',
+        s('licenses') ? `Licenses: ${s('licenses')}` : '',
+        str('links') ? `Links: ${str('links')}` : '',
+    ].filter(Boolean).join('\n') || `No data for ${name}.`;
+}

package/dist/index.js

@@ -0,0 +1,4 @@
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { createServer } from "./server.js";
+const main = async () => { const server = createServer(); await server.connect(new StdioServerTransport()); };
+main().catch((error) => { console.error("Fatal error:", error); process.exit(1); });

package/dist/server.js

@@ -0,0 +1,24 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z } from "zod";
+import { info } from "./api.js";
+const text = (value) => ({ content: [{ type: "text", text: value }] });
+const textError = (t) => ({ content: [{ type: "text", text: t }], isError: true });
+const READ_ONLY = { readOnlyHint: true, openWorldHint: true };
+const error = (e) => `Error: ${e instanceof Error ? e.message : String(e)}`;
+export function createServer() {
+    const server = new McpServer({ name: "deps-dev-mcp", version: "1.0.0" });
+    server.registerTool("info", {
+        title: "Info",
+        description: "Dependency data for one package version.",
+        inputSchema: z.object({ system: z.string().describe("Ecosystem like npm or pypi."), name: z.string().describe("Package name."), version: z.string().describe("Version.").optional() }),
+        annotations: READ_ONLY,
+    }, async (args) => {
+        try {
+            return text(await info(args));
+        }
+        catch (e) {
+            return textError(error(e));
+        }
+    });
+    return server;
+}

package/package.json

@@ -0,0 +1,44 @@
+{
+  "version": "1.0.0",
+  "type": "module",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/mrfentmen/deps-dev-mcp.git"
+  },
+  "bin": {
+    "deps-dev-mcp": "./dist/index.js"
+  },
+  "main": "./dist/index.js",
+  "files": [
+    "dist",
+    "server.json",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "start": "node dist/index.js",
+    "dev": "npm run build && node dist/index.js"
+  },
+  "license": "MIT",
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.4",
+    "zod": "^3.23.8"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "typescript": "^5.6.0"
+  },
+  "name": "deps-dev-mcp",
+  "description": "Open source dependency metadata from Google deps.dev. No key required.",
+  "mcpName": "io.github.mrfentmen/deps-dev-mcp",
+  "keywords": [
+    "mcp",
+    "deps",
+    "dependencies",
+    "oss",
+    "security"
+  ],
+  "engines": {
+    "node": ">=20"
+  }
+}

package/server.json

@@ -0,0 +1,20 @@
+{
+  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
+  "name": "io.github.mrfentmen/deps-dev-mcp",
+  "description": "Open source dependency metadata from Google deps.dev. No key required.",
+  "repository": {
+    "url": "https://github.com/mrfentmen/deps-dev-mcp",
+    "source": "github"
+  },
+  "version": "1.0.0",
+  "packages": [
+    {
+      "registryType": "npm",
+      "identifier": "deps-dev-mcp",
+      "version": "1.0.0",
+      "transport": {
+        "type": "stdio"
+      }
+    }
+  ]
+}