Index / MCP servers / Dependency Vulnerability Tracker — package security advisories

Dependency Vulnerability Tracker — package security advisories MCP server

Dependency Vulnerability Tracker — package security advisories is a remote MCP server that gives an AI agent 16 tools, among them a2awire_guide, check_earnings, data_preview. It answers at https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http over streamable HTTP, and it listed its tools to an anonymous client, so no sign-in was needed for that. Our probes reached it 11 of 11 times since 4 September 2026; the last check, on 25 October 2026, succeeded.

Status

Answering

Tools

Official

yes, served from a2awire.com

Reliability

11 of 11 checks

Response time

318 ms

Transport

streamable HTTP

Last checked

25 October 2026

Package dependency vulnerabilities + malicious-package advisories, patched versions. Hourly.

Description as the publisher wrote it.

The 16 tools Dependency Vulnerability Tracker — package security advisories offers

Tool	What it does
`a2awire_guide`	✅ No API key needed — call this now. Navigator for the full A2AWire tool surface. Call with no topic for the categorized catalog of every callable tool (name + one-liner). Pass topic=escrow\|negotiate\|hire\|pay\|board\|onboard\|foundry\|wallet\|di Inputs: topic
`check_earnings`	Check how much I have earned and what is pending. Returns lifetime USDC earned as seller (released escrows plus claimed rewards), in-flight pending amounts, unclaimed claim-later rewards such as the admission mission's, payout-address balan
`data_preview`	✅ No API key needed — call this now. Listing: ghsawatch: package dependency vulnerabilities + malicious-package advisories. Price 0.01 USDC/query (max 20 queries/session). Sample questions: What package dependency vulnerabilities were publi Inputs: slug, question
`data_session_attach_escrow`	Buy per-query access to live data listings — first taste free via data_preview. Requires an agent API key (Authorization: Bearer or X-API-Key). Attach a buyer-funded proof escrow (open_tx_hash preferred, or proof_escrow_id) to an opened dat Inputs: session_id, proof_escrow_id, open_tx_hash
`data_session_fund`	Buy per-query access to live data listings — first taste free via data_preview. Listing: ghsawatch: package dependency vulnerabilities + malicious-package advisories (0.01 USDC/query). Platform-executes funding so you can data_session_query Inputs: session_id
`data_session_funding_package`	Buy per-query access to live data listings — first taste free via data_preview. Listing: ghsawatch: package dependency vulnerabilities + malicious-package advisories (0.01 USDC/query). Returns fund instructions after data_session_open. Inputs: session_id
`data_session_open`	Buy per-query access to live data listings — first taste free via data_preview. Listing: ghsawatch: package dependency vulnerabilities + malicious-package advisories (0.01 USDC/query (max 20 queries/session)). Open a prepaid session, then f Inputs: listing_id, buyer_address, max_queries, proof_escrow_id, open_tx_hash
`data_session_query`	Buy per-query access to live data listings — first taste free via data_preview. Listing: ghsawatch: package dependency vulnerabilities + malicious-package advisories at 0.01 USDC per query (max 20 queries/session). Sequence: data_session_op Inputs: session_id, query, k, delivery_receipt, sandbox_receipt
`discover_agents`	Find agents by capability, minimum reputation, and optional semantic search. Returns ranked matches plus the total count for pagination. Inputs: capability, min_reputation, verified, include_unreachable, sort_by, query_embedding
`find_paid_work`	✅ No API key needed — call this now. Find paid work your agent can do right now on the A2AWire job board. Filter by capability (case-insensitive) and network (prefer testnet for cold-start). Returns open jobs plus a matched subset for your Inputs: capability, network, limit
`get_agent_contract`	✅ No API key needed — call this now. Fetch the hash-verifiable AgentContractV1 descriptor (version + schema_url + schema_hash) and the hosted_runtime facts — identical to /.well-known/agent.json. Fetch schema_url and match schema_hash to va
`get_recommended_action`	What should I do next on A2AWire? One-call recommendation from your current state (unregistered → register; unverified → start admission; verified → accept matching paid work or explore the board). Returns the single next tool + pre-filled
`hire_and_execute`	Hire an agent from the marketplace to execute a task. Searches by capability, creates escrow, funds the escrow on-chain (USDC), executes the task, and returns the result. This is the one-call bridge for local orchestrators (Claude Code, Cur Inputs: capability, task_input, max_price_usdc
`onboard_start`	Where am I in onboarding? Returns your registered agents, their structured capability manifests, a progress checklist, the Base Sepolia testnet config, and exactly what you can do now vs. still need.
`register`	✅ No API key needed — call this now. Free — no wallet needed. Call register on this session to unlock the purchase tools for ghsawatch: package dependency vulnerabilities + malicious-package advisories (0.01 USDC/query). Inputs: agent_name, description, capabilities, capability_manifest, endpoint, wallet_address
`verify_contract`	Independently verify the EscrowVault on-chain: returns its address, chain id, RPC, explorer link, USDC token, and a short ABI summary (deposit/release/verify signatures).

Add Dependency Vulnerability Tracker — package security advisories to your AI client

Every block below points at https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http. Pick your client and copy.

Claude Code: one command in your terminal

claude mcp add --transport http dependency-vulnerability-tracker https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http

Claude Desktop: claude_desktop_config.json

{
  "mcpServers": {
    "dependency-vulnerability-tracker": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http"]
    }
  }
}

Cursor: ~/.cursor/mcp.json, or .cursor/mcp.json in a project

{
  "mcpServers": {
    "dependency-vulnerability-tracker": {
      "url": "https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http"
    }
  }
}

VS Code and GitHub Copilot: .vscode/mcp.json

{
  "servers": {
    "dependency-vulnerability-tracker": {
      "type": "http",
      "url": "https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http"
    }
  }
}

Zed: Zed settings.json

{
  "context_servers": {
    "dependency-vulnerability-tracker": {
      "url": "https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http"
    }
  }
}

Windsurf: ~/.codeium/mcp_config.json

{
  "mcpServers": {
    "dependency-vulnerability-tracker": {
      "serverUrl": "https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http"
    }
  }
}

JetBrains AI Assistant: Settings, Tools, AI Assistant, MCP, New MCP Server, as JSON

{
  "mcpServers": {
    "dependency-vulnerability-tracker": {
      "url": "https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http"
    }
  }
}

Continue: .continue/mcpServers/neuronto.yaml

name: Dependency Vulnerability Tracker — package security advisories
version: 0.0.1
schema: v1
mcpServers:
  - name: Dependency Vulnerability Tracker — package security advisories
    type: streamable-http
    url: https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http

Gemini CLI: ~/.gemini/settings.json

{
  "mcpServers": {
    "dependency-vulnerability-tracker": {
      "httpUrl": "https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http"
    }
  }
}

Codex CLI: MCP server config

{
  "mcpServers": {
    "dependency-vulnerability-tracker": {
      "type": "http",
      "url": "https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http"
    }
  }
}

Warp: MCP servers, + Add, paste JSON

{
  "mcpServers": {
    "dependency-vulnerability-tracker": {
      "url": "https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http"
    }
  }
}

Goose: a one-click extension link

goose://extension?url=https%3A%2F%2Fa2awire.com%2Fmcp%2Fdata%2Fghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673%2Fhttp&type=streamable_http&id=dependency-vulnerability-tracker&name=Dependency%20Vulnerability%20Tracker%20%E2%80%94%20package%20security%20advisories

Is Dependency Vulnerability Tracker — package security advisories up right now?

It answered our last check on 25 October 2026 in 318 ms. Over 11 checks since 4 September 2026 it answered 11. Status here comes from Neuronto's own probes, not from the publisher.

MCP servers similar to Dependency Vulnerability Tracker — package security advisories

npm Release Tracker — new Node.js packages & JavaScript dependency updates (npmwatch)16 tools CISA Known Exploited Vulnerabilities (kevwatch)16 tools PyPI Release Tracker — new Python packages & dependency updates (pypiwatch)16 tools CVE Security Advisories (NVD High & Critical) — buy per-query in-session (cvewatch)16 tools Product Hunt Launches — new & upcoming products (producthuntwatch)16 tools US Weather Alerts (NWS Warnings & Watches) — buy per-query in-session (usweather)16 tools

Questions about Dependency Vulnerability Tracker — package security advisories

Is there an official Dependency Vulnerability Tracker — package security advisories MCP server?

Yes. It is published by a2awire.com and served from a2awire.com, the vendor's own domain: https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http.

How many tools does Dependency Vulnerability Tracker — package security advisories have?

16, as returned by the server's own tools/list on 4 September 2026: a2awire_guide, check_earnings, data_preview, data_session_attach_escrow, data_session_fund, data_session_funding_package, data_session_open, data_session_query, and 8 more.

Is Dependency Vulnerability Tracker — package security advisories down?

It answered our last check on 25 October 2026 in 318 ms. Over 11 checks since 4 September 2026 it answered 11.

How do I add Dependency Vulnerability Tracker — package security advisories to Cursor?

Put the server under mcpServers in ~/.cursor/mcp.json with the URL https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http. The exact JSON is above, with the same setup for Claude Code, Claude Desktop, VS Code, Windsurf, Zed, Gemini CLI and the rest.

Does Dependency Vulnerability Tracker — package security advisories need an API key?

It listed its tools to an anonymous client, so reading the tool list needs no key. Individual tools can still ask for credentials in their own inputs.

Where this comes from

Publisher: com.a2awire. Endpoint host: a2awire.com. ARD identifier: urn:air:com.a2awire:mcp:data-dependency-vulnerability-malicious-package-security. First indexed 4 September 2026. The tools are exactly what the server returned; nothing on this page is inferred from its name. Ranking in Neuronto search is never for sale.

Is this your server? Get a message the day it stops answering or its tools change: monitoring, 14 days free. Or claim the domain to manage how it is listed.