io.github.unpkg/unpkg-mcp

up checked 2026-11-11T04:39:08.703Z

Unclaimed · Unverified

Agent searches it appeared in, last 30 days: 0. Run this server? Claim the listing: verified label, uptime alerts and analytics.

Publisher-provided title

UNPKG

Publisher-provided description

Live npm and UNPKG data for AI agents: resolution, audits, import maps, malware/CVE checks.

Summary by lookupd

Resolves npm packages and versions, builds and verifies UNPKG file URLs, generates import maps, and checks packages for malware and CVEs.

Install

Claude Code, remote (streamable-http)

claude mcp add --transport http unpkg https://mcp.unpkg.com/mcp

Codex, remote (streamable-http)

codex mcp add unpkg --url https://mcp.unpkg.com/mcp

Cursor, remote (streamable-http) → .cursor/mcp.json

{
  "mcpServers": {
    "unpkg": {
      "url": "https://mcp.unpkg.com/mcp"
    }
  }
}

Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.

Tools (14 tools)

Publisher-provided text

• resolve_package Resolve a package name plus exact version, dist-tag, or semver range to the version that exists on npm today, with its browser entry points. Use this instead of
• list_files List the real files inside an exact or resolvable package version via UNPKG ?meta. Use this before choosing a file path; never guess paths.
• build_file_url Build a direct UNPKG file URL (the original file lookup) with a deliberate version policy, verifying the file exists when a path is given.
• audit_dependencies Classify a project's runtime dependencies for conversion to direct UNPKG file lookups, in framework context when given. Read the project's package.json yourself
• verify_url Check that a UNPKG file URL actually resolves (follows redirects) before you put it in a project.
• generate_importmap Resolve a set of bare specifiers to UNPKG file URLs and return a ready-to-paste import map. Entry files are resolved live from each package.
• check_importmap Validate an existing or proposed import map: every UNPKG URL resolves, files exist, versions are mutually consistent (including react/react-dom pairing and dupl
• search_packages Search npm for a need (e.g. 'date picker', 'markdown parser') and annotate each result with browser readiness for direct UNPKG file lookup: browser-ready ESM, C
• estimate_migration_impact Order-of-magnitude estimate of bandwidth offloaded (and hosting dollars, if a $/GB is given) when bytes move from first-party hosting to UNPKG. Range-based with
• shield_whoami Return the Shield account, organization, and entitlements for the OAuth login on this connection. Requires an approved Shield account; anonymous connections get
• shield_simulate_request Preview what Shield would do for one package@version request (optionally with referer/origin) under the logged-in user's effective pin/block rules, using the sa
• shield_check_packages Check exact package@version pairs against Shield intel: malware verdict (with review state) and CVEs affecting that version, including the first patched version
• shield_domain_packages List the caller's verified domains with package counts, or the packages Shield has observed on one domain. With includeThreats, one domain's packages come back
• shield_watchlist_status Return the logged-in org's monitored packages, blocklist entries, and pin policies as Shield currently holds them. Requires Shield login.

Details

• Version: 1.0.0
• Transports: streamable-http
• Uptime (7 days): 100%
• Median latency: 242 ms
• First indexed: 2026-11-07T05:17:14.572Z
• Last seen in registry: 2026-11-07T05:17:14.572Z
• Repository: https://github.com/unpkg/unpkg-mcp
• Website: https://mcp.unpkg.com

Badge for your README

Shows this live status and links here; updates hourly.

[![lookupd status](https://lookupd.com/badge/io.github.unpkg/unpkg-mcp.svg)](https://lookupd.com/servers/io.github.unpkg/unpkg-mcp)

• 62071 servers
• Last crawl: 2026-11-11T16:39:06.253Z
• API base: https://api.lookupd.com
• MCP URL: https://api.lookupd.com/mcp