lurq

Name: lurq
Author: jadenryu

MCP serverMCP

Verify npm packages before your AI agent installs them: hallucinations, advisories, API drift.

by jadenryurepository ↗homepage ↗v0.1.7MIT

Is this yours?

This record is unclaimed

Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.

Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"lurqrun","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.

Claim this record

Observed by Wellknown

Evidence

Everything here was measured by our prober or read from a registry. Nothing is self-reported.

30-day availability85/89 checks ok

when	check	result	http	latency	detail
4 h ago	mcp initialize	ok	200	96 ms	server lurq 0.1.9 · protocol 2025-06-18 · 16 tools
10 h ago	mcp initialize	ok	200	101 ms	server lurq 0.1.9 · protocol 2025-06-18 · 16 tools
17 h ago	mcp initialize	ok	200	97 ms	server lurq 0.1.9 · protocol 2025-06-18 · 16 tools
5 d ago	mcp initialize	failed	—	—	timeout
7 d ago	mcp initialize	failed	—	—	timeout
8 d ago	mcp initialize	failed	—	—	timeout
8 d ago	mcp initialize	failed	500	104 ms	http 500
9 d ago	mcp initialize	ok	200	109 ms	server lurq 0.1.9 · protocol 2025-06-18 · 16 tools
9 d ago	mcp initialize	ok	200	103 ms	server lurq 0.1.9 · protocol 2025-06-18 · 16 tools
9 d ago	mcp initialize	ok	200	104 ms	server lurq 0.1.9 · protocol 2025-06-18 · 16 tools

Tools observed via MCP handshake

evaluate — Full evidence read for one npm package: health and quality scores and the signals behind them, advisories, the shared safety verdict, a summary and a usage guid
policy — The rules this account's selection policy enforces on which packages you may add: denied packages (with the reason), license allowlist, confidence, advisory, ad
compare — Side-by-side comparison of 2–5 npm packages you are choosing between, ranked by health score. Untracked names are fetched on demand; one still being scored come
compat — Check whether a set of packages forms a coherent stack. Resolves the whole set the way npm would and returns a definitive verdict: compatible, conflict (with th
verify — Confirm an npm package is real, healthy, and not risky before installing: guards against hallucinated or typosquatted names, deprecations and known advisories,
usage — A package version's TYPED API: exported symbols and their signatures from its shipped .d.ts (or DefinitelyTyped), exact to the version, none of it in the model'
diagram — Emit a reference-architecture Mermaid diagram for a stack you have already chosen (package names). A labeled starting point keyed by layer, not a validated arch
resolve_surface — What a package version ACTUALLY exports at runtime, extracted from its shipped JavaScript rather than from documentation or the model's memory: names and arity,
diff_surface — What changed in a package's runtime surface between two versions: symbols removed, added, and arity changes, plus renames the package itself proves (a removed n
mcp_stack — Check whether a set of MCP servers can be wired into one agent together. The npm question does not apply — servers are separate processes with nothing to resolv
mcp_surface — What an MCP server ACTUALLY exposes: every tool, its required and optional parameters, and its behaviour annotations, read from a live `tools/list` handshake in
mcp_drift — What moved in an MCP server's tool contract between two versions: tools removed, parameters that became required, types narrowed, and annotation flips. Two find
connect_check — Before wiring an MCP server into a client, find out whether it will work there and exactly what it takes. Accepts an endpoint URL, an official-registry server n
audit — Assess an entire project's dependencies in ONE call: which packages are outdated, deprecated or carry advisories for the exact installed version, and which conf
capabilities — Look up which lurq tool answers a situation, and what to run next. Call when you're unsure whether lurq covers something (an upgrade, a licence rule, a version'
report_outcome — Opt-in feedback after you act on lurq's evidence about a package (verify, evaluate, compare, compat): whether you went with it and whether it built. No source c

Declared by sources

What the publisher says

Attributed to the source that supplied each field. Treated as claims, not facts.

No long description beyond the summary.

mcpmcp-servermodel-context-protocolnpmdependenciespackage-verificationhallucinated-packagesslopsquattingtyposquattingsupply-chain-securitydependency-managementai-agentscoding-agentclaude-codecursorvscodecopilot

kind Official MCP Registry

name Official MCP Registry

license npm registry

repoUrl Official MCP Registry

summary Official MCP Registry

version Official MCP Registry

description Official MCP Registry

homepageUrl Official MCP Registry

publisherName Official MCP Registry

Provenance

Where this record came from

Every source is kept verbatim. Field changes are logged as events.

Official MCP Registryio.github.jadenryu/lurq

first seen 1 mo ago · fetched 27 h agoopen ↗

npm registrylurqrun

first seen 2 mo ago · fetched 19 h agoopen ↗

Field history (12 recent events)

1 mo ago · observed · packageFacts → {"name":"lurqrun","registry":"npm","publishedAt":"2026-09-22T21:32:26.681Z","latestVersion":"0.1.9","weeklyDownloads":18
1 mo ago · observed · packageFacts → {"name":"lurqrun","registry":"npm","publishedAt":"2026-09-21T20:43:41.649Z","latestVersion":"0.1.8","weeklyDownloads":85
1 mo ago · declared · publisherName → "jadenryu"
1 mo ago · declared · description → "Verify npm packages before your AI agent installs them: hallucinations, advisories, API drift."
1 mo ago · declared · summary → "Verify npm packages before your AI agent installs them: hallucinations, advisories, API drift."
1 mo ago · declared · repoUrl → "https://github.com/jadenryu/lurq"
1 mo ago · declared · name → "lurq"
1 mo ago · declared · description → "Verify npm packages before your AI coding agent installs them: hallucinated and typosquatted names, advisories, API dri
1 mo ago · declared · summary → "Verify npm packages before your AI coding agent installs them: hallucinated and typosquatted names, advisories, API dri
1 mo ago · declared · homepageUrl → "https://www.lurq.run"
1 mo ago · declared · version → "0.1.7"
1 mo ago · observed · packageFacts → {"name":"lurqrun","registry":"npm","publishedAt":"2026-09-13T21:43:28.615Z","latestVersion":"0.1.7","weeklyDownloads":65

This record is unclaimed

Evidence

What the publisher says

Capabilities

Where this record came from