Official MCP RegistryListed
PkgGuard
Dependency scan for agents: known CVEs and malicious packages via OSV.dev. By Crypto Money Maker
First seen 22 Oct 2026. Evidence as of 24 Oct 2026.
2
Tools
From an anonymous probe
1
Source listings
Each with its own history
3
Recorded changes
Since first seen
Tools
| Tool | Description | Behaviour |
|---|---|---|
| check_package | Checks one package version (npm, PyPI, Go, crates.io, Packagist, RubyGems, Maven, NuGet) against OSV.dev: advisory ids, severity, CVSS, fixed-in versions and malicious flags. Free tier: 30 calls/day per IP with full results, then $0.001 per call in USDC over x402 (/v1/package). | Read-only |
| scan_dependencies | Checks a package.json, lockfile, requirements.txt, go.mod, Cargo.lock, poetry.lock or composer.lock (or a list of packages) against OSV.dev for known vulnerabilities and confirmed-malicious packages. Returns per-package advisory ids (CVE/GHSA/MAL), severity, CVSS and fixed-in versions. Free tier: 30 calls/day per IP with full results, up to 100 packages; then $0.003 per scan (up to 500) in USDC over x402 (/v1/scan). | Read-only |
Change history
- scan_dependencies: description changed (+"Returns" +"ids (CVE/GHSA/MAL)," +"versions. Free tier: 30 calls/day per IP with full results, up to 100 packages; then $0.003 per scan")
- check_package: description changed (+"OSV.dev:" +"CVSS, fixed-in versions" +"malicious flags. Free tier: 30 calls/day per IP with full results, then $0.001 per call in USDC over x402 (/v1/package).")
- Listed (registry)
| Source | Listing | First seen | Last seen | Versions |
|---|---|---|---|---|
| Official MCP Registry | co.youraitools/pkgguard | 22 Oct 2026 | 23 Oct 2026 | 1 |