Best npm MCP Servers
npm is the world's largest software registry, used by JavaScript developers to share and borrow packages for their projects.
Why this server?
Provides vulnerability intelligence, dependency graph analysis, and license information for npm packages using OSV.dev, NVD, and deps.dev APIs.
AlicenseAqualityBmaintenanceProvides AI-ready access to US/UK nonprofit data and OSS vulnerability intelligence via MCP, with 10 tools and no API key required.655169 npm3-Why this server?
Allows checking JavaScript packages hosted on npm for vulnerabilities and supply-chain compromises.

@attestd/mcpofficial
AlicenseAqualityBmaintenanceEnables checking of package vulnerabilities and supply-chain risks using Attestd API. Supports single and batch checks, CVE details, and covered products listing.464 npmMITWhy this server?
Provides tools for querying package information, versions, and vulnerabilities from npm registry through JFrog's package service integration.

JFrog MCP Serverofficial
AlicenseBqualityCmaintenanceExperimental Model Context Protocol server that enables access to JFrog Platform API capabilities including repository management, build tracking, artifact searching, and package security analysis.31118Apache 2.0Why this server?
Package manager used to install dependencies and run the weather MCP server.
AlicenseAqualityDmaintenanceA free Model Context Protocol server that retrieves global weather data and forecasts via the Open-Meteo API, with Sydney set as the default location.145 npm4MITWhy this server?
Available as an npm package (@302ai/browser-use-mcp) for easy installation and usage with browser automation capabilities

302AI BrowserUse MCP Serverofficial
AlicenseAqualityDmaintenanceA Model Context Protocol server that enables Claude Desktop to browse the web, likely allowing the AI to access and interact with web content.223 npm9MITWhy this server?
Allows checking if a specific npm package is used across repositories and developer machines, useful for supply-chain incident response.

stepsecurity-mcpofficial
AlicenseAqualityDmaintenanceMCP server for the StepSecurity platform that enables investigating supply-chain and CI/CD security issues through natural language.3020 npm4Apache 2.0Why this server?
Provides package distribution through npm registry, allowing the server to be installed and run via npx
AlicenseAqualityAmaintenanceA server that enables web scraping of difficult-to-access websites affected by bot detection, captchas, or geolocation restrictions, returning results in either HTML or Markdown format.4292 npm18MITWhy this server?
Allows grading MCP servers published on npm by referencing their npm package identifier.

Polygraphofficial
AlicenseAqualityAmaintenanceOpen behavioral litmus for MCP servers — grades A–F across tool-output injection, egress, sensitive-data, and adversarial-input, with reproducible, content-addressed evidence. Tools: run_litmus, verify_attestation.4120 npm8Apache 2.0Why this server?
Supports installation and building of the MCP server through npm package management, with commands for dependencies, building, and running the inspector.

gotoHuman MCPofficial
AlicenseAqualityFmaintenanceAdd human approval steps to your AI agents and automations with gotoHuman.329 npm52MIT