PackageGuard: x402-Powered MCP Package Security Checker
Middle-Importance108 · reddit · 2026-07-07
A developer introduced PackageGuard, an x402-gated MCP tool that checks the safety of npm/PyPI packages before agent installation. It verifies package existence, scans for known CVEs via OSV.dev, and analyzes name, age, and download counts to flag typosquats or slopsquats.
The tool offers both an HTTP endpoint and an MCP tool (checkpackagesafety). Agents can perform checks on the Base mainnet for 0.005 USDC per payment, requiring no API keys or registration. It is already listed on the official MCP Registry and Smithery.
More from coding & agent
- Tweaked orchestration skill turns agents into self-policing workflow — pvncher · 2026-07-27
- A practical map of 11 protocols in the modern AI agent stack — TheTuringPost · 2026-07-27
- Qwen Code nightly adds Goal v3 orchestration and workspace channel controls — qwen-code-ci-bot · 2026-07-27
- NVIDIA says Nemotron 3 Ultra hit 97.1% on agentic RTL chip-design tasks — NVIDIAAI · 2026-07-27
- Tokyo Agent Forge hackathon shipped production-ready AI agents in one day — DavidBennett__ · 2026-07-27
- Long-running agents will need immutable event logs, this thread argues — sebpaquet · 2026-07-27