An MCP server for querying ecosyste.ms ecosystem package data, supporting fast query of key package information through a local SQLite database and providing an API fallback mechanism.
2.5 points
6.3K

What is the Ecosyste.ms MCP Server?

The Ecosyste.ms MCP server is an intelligent data query tool designed specifically for developers and AI assistants to quickly obtain detailed information on various software package ecosystems. It's like an 'encyclopedia' for software packages, telling you the license, version history, security vulnerabilities, dependencies, GitHub repository information, etc. of any software package. This server provides extremely fast queries through a local SQLite database. It has pre - loaded data for key packages (such as lodash, express, react, etc.) and also supports API fallback queries for other packages.

How to use the Ecosyste.ms MCP Server?

It's very simple! Just configure the server in your AI development tools (such as Claude Desktop, Cursor, VS Code, etc.), and then you can directly ask the AI assistant questions about software packages. For example, you can ask: 'What license does lodash use?' or 'What security vulnerabilities does express have?' The AI assistant will automatically call the server to get the latest information and answer you.

Use cases

1. Project dependency analysis: Quickly understand the information of software packages used in the project. 2. Security audit: Check the security vulnerabilities and license compliance of software packages. 3. Technical research: Compare the popularity and maintenance status of different software packages. 4. Development decision - making: Select the most suitable dependency packages for the project. 5. Learning and research: Understand the structure and relationships of the software ecosystem.

Main features

Software package information query
Get the complete information of a software package, including basic metadata such as name, description, license, and homepage link.
View version history
View all released versions of a software package and their release times to understand the version evolution history.
Security vulnerability check
Get the security advisories and CVE vulnerability information of a software package to assist in security audits.
Repository statistics
View the number of stars, branches, and the main programming language of the corresponding GitHub repository of a software package.
Dependency analysis
Find other software packages that depend on a certain software package to understand its scope of influence.
Full - text search
Search for relevant software packages in the local database, supporting keyword matching.
Multi - ecosystem support
Supports over 40 software package ecosystems, including npm, PyPI, RubyGems, Cargo, Go, etc.
Fast local database
Built - in database for key software packages, with extremely fast query speed and no need to wait for network requests.
Advantages
๐Ÿš€ Extremely fast query: The local database provides millisecond - level response time.
๐Ÿ“ฆ Comprehensive data: Covers over 40 software package ecosystems with rich information.
๐Ÿ”’ Privacy protection: Local queries do not disclose search history to third parties.
โšก Offline availability: Key software package data can be queried offline.
๐Ÿ”„ Automatic fallback: Automatically uses the API to obtain data when there is no local data.
๐ŸŽฏ Precise matching: Supports multiple query methods such as PURL and repository URL.
๐Ÿ“Š Statistical information: Provides database usage and health status
Limitations
๐Ÿ“ Database size: The local database only contains key software packages, and non - key packages require network queries.
๐ŸŒ Network dependency: Internet connection is required when querying non - key packages.
๐Ÿ”„ Data update: The local database needs to be updated regularly to obtain the latest information.
๐Ÿ”ง Configuration requirements: The MCP client needs to be correctly configured to use.
๐Ÿ’พ Storage space: The local database occupies a certain amount of disk space (about dozens of MB)

How to use

Install the server
Install globally via npm or run directly using npx.
Configure the MCP client
Add the server to the configuration file according to the AI development tool you are using.
Start the server
Restart your AI development tool or reload the configuration.
Start querying
Directly ask the AI assistant questions about software packages.

Usage examples

License check
Check whether the license of a new dependency meets the project requirements before introducing it.
Security audit
Check whether there are known security vulnerabilities in the software packages used in the project.
Technology selection
Compare the popularity and maintenance status of different software packages.
Dependency impact analysis
Understand how many other software packages will be affected by a change in a certain software package.
Version upgrade planning
View the version history of a software package and plan the upgrade strategy.

Frequently Asked Questions

Is this server free?
Is the data up - to - date?
Which software package ecosystems are supported?
How to update the local database?
Will the query leak my privacy?
Can it be used in a network - free environment?
How to view which software packages are in the database?
Does it support custom databases?

Related resources

Official GitHub repository
View source code, submit issues, and participate in contributions.
Ecosyste.ms official website
Learn more about the ecosyste.ms project.
MCP official documentation
Learn the detailed specifications of the Model Context Protocol.
Critical software package database
Understand the data source and update mechanism of the local database.
npm package page
View npm package information and installation statistics.

Installation

Copy the following command to your Client for configuration
{
  "mcpServers": {
    "ecosystems": {
      "command": "npx",
      "args": ["@ecosyste-ms/mcp"]
    }
  }
}

{
  "mcpServers": {
    "ecosystems": {
      "command": "npx",
      "args": ["@ecosyste-ms/mcp"],
      "env": {
        "ECOSYSTEMS_DB_PATH": "/path/to/critical-packages.db"
      }
    }
  }
}
Note: Your key is sensitive information, do not share it with anyone.

Alternatives

V
Vestige
Vestige is an AI memory engine based on cognitive science. By implementing 29 neuroscience modules such as prediction error gating, FSRS - 6 spaced repetition, and memory dreaming, it provides long - term memory capabilities for AI. It includes a 3D visualization dashboard and 21 MCP tools, runs completely locally, and does not require the cloud.
Rust
8.9K
4.5 points
M
Moltbrain
MoltBrain is a long-term memory layer plugin designed for OpenClaw, MoltBook, and Claude Code, capable of automatically learning and recalling project context, providing intelligent search, observation recording, analysis statistics, and persistent storage functions.
TypeScript
10.5K
4.5 points
B
Bm.md
A feature-rich Markdown typesetting tool that supports multiple style themes and platform adaptation, providing real-time editing preview, image export, and API integration capabilities
TypeScript
15.4K
5 points
S
Security Detections MCP
Security Detections MCP is a server based on the Model Context Protocol that allows LLMs to query a unified security detection rule database covering Sigma, Splunk ESCU, Elastic, and KQL formats. The latest version 3.0 is upgraded to an autonomous detection engineering platform that can automatically extract TTPs from threat intelligence, analyze coverage gaps, generate SIEM-native format detection rules, run tests, and verify. The project includes over 71 tools, 11 pre-built workflow prompts, and a knowledge graph system, supporting multiple SIEM platforms.
TypeScript
6.5K
4 points
P
Paperbanana
Python
9.4K
5 points
F
Finlab Ai
FinLab AI is a quantitative financial analysis platform that helps users discover excess returns (alpha) in investment strategies through AI technology. It provides a rich dataset, backtesting framework, and strategy examples, supporting automated installation and integration into mainstream AI programming assistants.
9.3K
4 points
B
Better Icons
An MCP server and CLI tool that provides search and retrieval of over 200,000 icons, supports more than 150 icon libraries, and helps AI assistants and developers quickly obtain and use icons.
TypeScript
9.9K
4.5 points
A
Assistant Ui
assistant - ui is an open - source TypeScript/React library for quickly building production - grade AI chat interfaces, providing composable UI components, streaming responses, accessibility, etc., and supporting multiple AI backends and models.
TypeScript
8.4K
5 points
M
Markdownify MCP
Markdownify is a multi-functional file conversion service that supports converting multiple formats such as PDFs, images, audio, and web page content into Markdown format.
TypeScript
37.0K
5 points
G
Gitlab MCP Server
Certified
The GitLab MCP server is a project based on the Model Context Protocol that provides a comprehensive toolset for interacting with GitLab accounts, including code review, merge request management, CI/CD configuration, and other functions.
TypeScript
26.4K
4.3 points
N
Notion Api MCP
Certified
A Python-based MCP Server that provides advanced to-do list management and content organization functions through the Notion API, enabling seamless integration between AI models and Notion.
Python
24.1K
4.5 points
D
Duckduckgo MCP Server
Certified
The DuckDuckGo Search MCP Server provides web search and content scraping services for LLMs such as Claude.
Python
80.1K
4.3 points
F
Figma Context MCP
Framelink Figma MCP Server is a server that provides access to Figma design data for AI programming tools (such as Cursor). By simplifying the Figma API response, it helps AI more accurately achieve one - click conversion from design to code.
TypeScript
70.2K
4.5 points
U
Unity
Certified
UnityMCP is a Unity editor plugin that implements the Model Context Protocol (MCP), providing seamless integration between Unity and AI assistants, including real - time state monitoring, remote command execution, and log functions.
C#
37.4K
5 points
G
Gmail MCP Server
A Gmail automatic authentication MCP server designed for Claude Desktop, supporting Gmail management through natural language interaction, including complete functions such as sending emails, label management, and batch operations.
TypeScript
23.3K
4.5 points
M
Minimax MCP Server
The MiniMax Model Context Protocol (MCP) is an official server that supports interaction with powerful text-to-speech, video/image generation APIs, and is suitable for various client tools such as Claude Desktop and Cursor.
Python
55.7K
4.8 points