PackageGuard: x402-Powered MCP Package Security Checker
Middle-Importance108 · reddit · 2026-07-07
A developer introduced PackageGuard, an x402-gated MCP tool that checks the safety of npm/PyPI packages before agent installation. It verifies package existence, scans for known CVEs via OSV.dev, and analyzes name, age, and download counts to flag typosquats or slopsquats.
The tool offers both an HTTP endpoint and an MCP tool (checkpackagesafety). Agents can perform checks on the Base mainnet for 0.005 USDC per payment, requiring no API keys or registration. It is already listed on the official MCP Registry and Smithery.
More from coding & agent
- Reticle builds a verification layer that lets AI coding agents check their own generated code — Scobleizer · 2026-10-27
- Dev training a guard model to block prompt injection, tool and memory poisoning — gnukeith · 2026-10-27
- Ex-Big Tech managers may thrive in the AI era: manage agents like you managed teams — lxfater · 2026-10-27
- SF 'Code Engineering' event picks up where 1,000-person harness engineering meetup left off — LangChain · 2026-10-27
- Prompt turns Claude Code into a forensics tool finding deleted iPhone photos in backups — alex_verem · 2026-10-27
- Phones won't be mobile IDEs but control planes for agent fleets, argues Yuchen Jin — Yuchenj_UW · 2026-10-27