PackageGuard: x402-Powered MCP Package Security Checker
Middle-Importance108 · reddit · 2026-07-07
A developer introduced PackageGuard, an x402-gated MCP tool that checks the safety of npm/PyPI packages before agent installation. It verifies package existence, scans for known CVEs via OSV.dev, and analyzes name, age, and download counts to flag typosquats or slopsquats.
The tool offers both an HTTP endpoint and an MCP tool (checkpackagesafety). Agents can perform checks on the Base mainnet for 0.005 USDC per payment, requiring no API keys or registration. It is already listed on the official MCP Registry and Smithery.
More from coding & agent
- alphaXiv open-sources OpenResearch to run parallel research agents with any model — alphaXiv · 2026-09-11
- MathModelAgent gains traction: auto-solves math modeling and writes a submission-ready paper — jihe520 · 2026-09-11
- DeskcommCRM: open-source AI sales CRM with native agents and WhatsApp hits 1k stars — melgarafael · 2026-09-11
- hyperresearch: agent-driven knowledge base that turns web research into a searchable wiki — jordan-gibbs · 2026-09-11
- Forter's 13 lessons from its agent sprint: skip custom RAG, lean on mature enterprise search — bibryam · 2026-09-11
- Two real 'company brains' opened up live: Gorgias' in-house Cortex vs Slite — femke_plantinga · 2026-09-11