MCPLow riskUnclaimed
package-risk
Package risk checks: maintenance, licence, advisories. Paid per call in USDC, no signup.
makosdDavidmakosddavid/package-risk
server.json
{
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"name": "io.github.makosdDavid/package-risk",
"description": "Package risk checks: maintenance, licence, advisories. Paid per call in USDC, no signup.",
"repository": {
"url": "https://github.com/makosdDavid/package-risk-mcp",
"source": "github"
},
"version": "1.0.5",
"packages": [
{
"registryType": "npm",
"identifier": "@makosdav/package-risk-mcp",
"version": "1.0.5",
"transport": {
"type": "stdio"
},
"environmentVariables": [
{
"description": "Private key of an EVM wallet holding a small amount of USDC on Base mainnet. Each tool call spends $0.005-$0.01 from it. Use a lightly funded key dedicated to this agent, never a main wallet.",
"isRequired": true,
"format": "string",
"isSecret": true,
"name": "EVM_PRIVATE_KEY"
}
]
}
]
}Permissions
DeclaredDetected
Runs code—
nodeInstalls—
npm:@makosdav/package-risk-mcp@1.0.5Runs install scripts—None
NetworkNoneNone
Needs credentials
EVM_PRIVATE_KEYEVM_PRIVATE_KEYOutside the workspace—None
Agent tools—None
Checks
Low risk · Nothing worth a warning was found.
Not reviewed by a person · Checked by rules; the model review is not switched on yet.
Versions
- #11.0.5latestOct 7, 2026
package-riskOpen in Codeg