DepScout

Name: DepScout
Author: yc-droid

MCP serverMCP

Scan packages and lockfiles (npm, PyPI, Go, Maven, Cargo, NuGet) for vulnerabilities and malware.

by yc-droidhomepage ↗v1.0.0

Is this yours?

This record is unclaimed

Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.

Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"depscout","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.

Claim this record

Observed by Wellknown

Evidence

Everything here was measured by our prober or read from a registry. Nothing is self-reported.

30-day availability57/57 checks ok

when	check	result	http	latency	detail
1 h ago	mcp initialize	ok	200	69 ms	server depscout 1.0.0 · protocol 2025-06-18 · 4 tools
8 h ago	mcp initialize	ok	200	136 ms	server depscout 1.0.0 · protocol 2025-06-18 · 4 tools
14 h ago	mcp initialize	ok	200	88 ms	server depscout 1.0.0 · protocol 2025-06-18 · 4 tools
20 h ago	mcp initialize	ok	200	162 ms	server depscout 1.0.0 · protocol 2025-06-18 · 4 tools
27 h ago	mcp initialize	ok	200	109 ms	server depscout 1.0.0 · protocol 2025-06-18 · 4 tools
34 h ago	mcp initialize	ok	200	109 ms	server depscout 1.0.0 · protocol 2025-06-18 · 4 tools
2 d ago	mcp initialize	ok	200	143 ms	server depscout 1.0.0 · protocol 2025-06-18 · 4 tools
2 d ago	mcp initialize	ok	200	89 ms	server depscout 1.0.0 · protocol 2025-06-18 · 4 tools
2 d ago	mcp initialize	ok	200	123 ms	server depscout 1.0.0 · protocol 2025-06-18 · 4 tools
3 d ago	mcp initialize	ok	200	199 ms	server depscout 1.0.0 · protocol 2025-06-18 · 4 tools

Tools observed via MCP handshake

check_package — Check one open-source package (npm, PyPI, Go, Maven, crates.io or NuGet) for safety and freshness. Returns a malicious-package flag (from OSV MAL- and malware a
check_dependencies — Check up to 50 packages at exact versions (for example from package.json, package-lock.json, requirements.txt, go.mod, pom.xml, Cargo.toml or a .csproj) against
check_lockfile — Audit a whole lockfile or dependency file in one call, including transitive dependencies where the file records them. Paste the file content as-is: package-lock
get_vulnerability — Look up one vulnerability or malicious-package advisory by ID (CVE, GHSA, PYSEC, GO, RUSTSEC, MAL and other OSV IDs) and return its summary, severity, CVSS vect

Declared by sources

What the publisher says

Attributed to the source that supplied each field. Treated as claims, not facts.

No long description beyond the summary.

kind Official MCP Registry

name Official MCP Registry

summary Official MCP Registry

version Official MCP Registry

description Official MCP Registry

homepageUrl Official MCP Registry

publisherName Official MCP Registry

Derived by Wellknown

Capabilities

Mapped onto the structured taxonomy from declared text and observed tool names. Confidence shown for derived entries.

code.security-reviewSecurity Review100%dev.package-managementPackages & Dependencies100%content.writingWriting & Editing51%

Provenance

Where this record came from

Every source is kept verbatim. Field changes are logged as events.

Official MCP Registryio.github.yc-droid/depscout

first seen 16 d ago · fetched 4 d agoopen ↗

Field history (6 recent events)

16 d ago · declared · summary → "Scan packages and lockfiles (npm, PyPI, Go, Maven, Cargo, NuGet) for vulnerabilities and malware."
16 d ago · declared · description → "Scan packages and lockfiles (npm, PyPI, Go, Maven, Cargo, NuGet) for vulnerabilities and malware."
16 d ago · declared · publisherName → "yc-droid"
16 d ago · declared · homepageUrl → "https://depscout.salesup.workers.dev/"
16 d ago · declared · version → "1.0.0"
16 d ago · declared · protocols → ["mcp"]