Index / MCP servers / pkg-oracle — Dependency Trust Oracle

pkg-oracle — Dependency Trust Oracle MCP server

pkg-oracle — Dependency Trust Oracle is a remote MCP server that gives an AI agent 1 tool, among them verify_package. It answers at https://mcp-snowy-dew-9447.fly.dev/mcp over streamable HTTP, and it listed its tools to an anonymous client, so no sign-in was needed for that. Our probes reached it 6 of 6 times since 11 September 2026; the last check, on 22 October 2026, succeeded.

Status

Answering

Tools

Reliability

6 of 6 checks

Response time

68 ms

Transport

streamable HTTP

Last checked

22 October 2026

Blocks typosquatted or hallucinated npm/PyPI packages before an AI agent installs them.

Description as the publisher wrote it.

The 1 tool pkg-oracle — Dependency Trust Oracle offers

Tool	What it does
`verify_package`	Dependency Trust Oracle. Call this BEFORE writing any package into a manifest (package.json, requirements.txt, pyproject.toml, ...). It checks whether the package actually exists on its registry, cross-references OSV.dev for known CVEs, pul Inputs: ecosystem, name, version

Add pkg-oracle — Dependency Trust Oracle to your AI client

Every block below points at https://mcp-snowy-dew-9447.fly.dev/mcp. Pick your client and copy.

Claude Code: one command in your terminal

claude mcp add --transport http pkg-oracle-dependency-trust-orac https://mcp-snowy-dew-9447.fly.dev/mcp

Claude Desktop: claude_desktop_config.json

{
  "mcpServers": {
    "pkg-oracle-dependency-trust-orac": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://mcp-snowy-dew-9447.fly.dev/mcp"]
    }
  }
}

Cursor: ~/.cursor/mcp.json, or .cursor/mcp.json in a project

{
  "mcpServers": {
    "pkg-oracle-dependency-trust-orac": {
      "url": "https://mcp-snowy-dew-9447.fly.dev/mcp"
    }
  }
}

VS Code and GitHub Copilot: .vscode/mcp.json

{
  "servers": {
    "pkg-oracle-dependency-trust-orac": {
      "type": "http",
      "url": "https://mcp-snowy-dew-9447.fly.dev/mcp"
    }
  }
}

Zed: Zed settings.json

{
  "context_servers": {
    "pkg-oracle-dependency-trust-orac": {
      "url": "https://mcp-snowy-dew-9447.fly.dev/mcp"
    }
  }
}

Windsurf: ~/.codeium/mcp_config.json

{
  "mcpServers": {
    "pkg-oracle-dependency-trust-orac": {
      "serverUrl": "https://mcp-snowy-dew-9447.fly.dev/mcp"
    }
  }
}

JetBrains AI Assistant: Settings, Tools, AI Assistant, MCP, New MCP Server, as JSON

{
  "mcpServers": {
    "pkg-oracle-dependency-trust-orac": {
      "url": "https://mcp-snowy-dew-9447.fly.dev/mcp"
    }
  }
}

Continue: .continue/mcpServers/neuronto.yaml

name: pkg-oracle — Dependency Trust Oracle
version: 0.0.1
schema: v1
mcpServers:
  - name: pkg-oracle — Dependency Trust Oracle
    type: streamable-http
    url: https://mcp-snowy-dew-9447.fly.dev/mcp

Gemini CLI: ~/.gemini/settings.json

{
  "mcpServers": {
    "pkg-oracle-dependency-trust-orac": {
      "httpUrl": "https://mcp-snowy-dew-9447.fly.dev/mcp"
    }
  }
}

Codex CLI: MCP server config

{
  "mcpServers": {
    "pkg-oracle-dependency-trust-orac": {
      "type": "http",
      "url": "https://mcp-snowy-dew-9447.fly.dev/mcp"
    }
  }
}

Warp: MCP servers, + Add, paste JSON

{
  "mcpServers": {
    "pkg-oracle-dependency-trust-orac": {
      "url": "https://mcp-snowy-dew-9447.fly.dev/mcp"
    }
  }
}

Goose: a one-click extension link

goose://extension?url=https%3A%2F%2Fmcp-snowy-dew-9447.fly.dev%2Fmcp&type=streamable_http&id=pkg-oracle-dependency-trust-orac&name=pkg-oracle%20%E2%80%94%20Dependency%20Trust%20Oracle

Is pkg-oracle — Dependency Trust Oracle up right now?

It answered our last check on 22 October 2026 in 68 ms. Over 6 checks since 11 September 2026 it answered 6. Status here comes from Neuronto's own probes, not from the publisher.

MCP servers similar to pkg-oracle — Dependency Trust Oracle

lurq16 tools Package Intel6 tools Package Intel6 tools Attester Oracle4 tools Vdb7 tools Purchaseiq1 tools

Questions about pkg-oracle — Dependency Trust Oracle

How many tools does pkg-oracle — Dependency Trust Oracle have?

1, as returned by the server's own tools/list on 14 September 2026: verify_package.

Is pkg-oracle — Dependency Trust Oracle down?

It answered our last check on 22 October 2026 in 68 ms. Over 6 checks since 11 September 2026 it answered 6.

How do I add pkg-oracle — Dependency Trust Oracle to Cursor?

Put the server under mcpServers in ~/.cursor/mcp.json with the URL https://mcp-snowy-dew-9447.fly.dev/mcp. The exact JSON is above, with the same setup for Claude Code, Claude Desktop, VS Code, Windsurf, Zed, Gemini CLI and the rest.

Does pkg-oracle — Dependency Trust Oracle need an API key?

It listed its tools to an anonymous client, so reading the tool list needs no key. Individual tools can still ask for credentials in their own inputs.

Where this comes from

Publisher: io.github.julian-martin89. Endpoint host: mcp-snowy-dew-9447.fly.dev. ARD identifier: urn:air:io.github.julian-martin89:mcp:pkg-oracle. First indexed 10 September 2026. The tools are exactly what the server returned; nothing on this page is inferred from its name. Ranking in Neuronto search is never for sale.

Is this your server? Get a message the day it stops answering or its tools change: monitoring, 14 days free. Or claim the domain to manage how it is listed.