io.github.julian-martin89/pkg-oracle

up checked 2026-11-11T07:39:37.513Z

Unclaimed · Unverified

Agent searches it appeared in, last 30 days: 0. Run this server? Claim the listing: verified label, uptime alerts and analytics.

Publisher-provided title

pkg-oracle — Dependency Trust Oracle

Publisher-provided description

Blocks typosquatted or hallucinated npm/PyPI packages before an AI agent installs them.

Summary by lookupd

Checks whether npm or PyPI package names exist and look legitimate before an agent adds them to a dependency manifest.

Install

Claude Code, remote (streamable-http)

claude mcp add --transport http pkg-oracle https://mcp-snowy-dew-9447.fly.dev/mcp

Codex, remote (streamable-http)

codex mcp add pkg-oracle --url https://mcp-snowy-dew-9447.fly.dev/mcp

Cursor, remote (streamable-http) → .cursor/mcp.json

{
  "mcpServers": {
    "pkg-oracle": {
      "url": "https://mcp-snowy-dew-9447.fly.dev/mcp"
    }
  }
}

Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.

Tools (1 tools)

Publisher-provided text

• verify_package Dependency Trust Oracle. Call this BEFORE writing any package into a manifest (package.json, requirements.txt, pyproject.toml, Cargo.toml, ...). It checks wheth

Details

• Version: 1.0.1
• Transports: streamable-http
• Uptime (7 days): 100%
• Median latency: 476 ms
• First indexed: 2026-11-01T09:36:52.732Z
• Last seen in registry: 2026-11-01T09:36:52.870Z

Badge for your README

Shows this live status and links here; updates hourly.

[![lookupd status](https://lookupd.com/badge/io.github.julian-martin89/pkg-oracle.svg)](https://lookupd.com/servers/io.github.julian-martin89/pkg-oracle)

• 62092 servers
• Last crawl: 2026-11-11T17:38:11.606Z
• API base: https://api.lookupd.com
• MCP URL: https://api.lookupd.com/mcp