How do I install pkgtruth?

Pick a client above and copy the generated config. Cursor and VS Code also have a deep link when the server can run locally or remotely.

Is pkgtruth official?

No. Registry-listed is not the same as vendor-official. Read the methodology for the difference.

How is the trust score calculated?

This listing scores 31 (Limited). The formula is published on the methodology page.

MCPpedia

pkgtruth MCP Server — Install for Claude, Cursor & VS Code | MCPpedia

pkgtruth MCP Server

Name: pkgtruth MCP Server
Author: hxckya

Catches hallucinated and slopsquatted npm and PyPI packages before an agent installs them.

Tools Versions Alternatives

Registryhxckya

31Limited

Install

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "hxckya-pkgtruth": {
      "command": "npx",
      "args": [
        "-y",
        "pkgtruth@0.2.2"
      ],
      "env": {
        "PKGTRUTH_REGISTRY": "",
        "PKGTRUTH_DOWNLOADS_API": "",
        "PKGTRUTH_CACHE_DIR": "",
        "PKGTRUTH_TIMEOUT_MS": ""
      }
    }
  }
}

Install guide

Related servers

kordoc

83Excellent

Parse Korean documents (HWP, HWPX, PDF, XLSX, DOCX, PPTX) to Markdown; fill forms, diff, render.

Registrychrisryugj2.5K stars44.2K/wk

pagespeed-insights-mcp

75Good

Google PageSpeed Insights and CrUX: six workflow tools for web performance.

Environment

Name	Required	Notes
PKGTRUTH_REGISTRY	No	Alternate npm registry to verify against. Defaults to https://registry.npmjs.org.
PKGTRUTH_DOWNLOADS_API	No	Alternate downloads API used for adoption figures. Defaults to https://api.npmjs.org.
PKGTRUTH_CACHE_DIR	No	Where adoption figures are cached between runs. Defaults to ~/.cache/pkgtruth.
PKGTRUTH_TIMEOUT_MS	No	Per-request timeout in milliseconds. Defaults to 8000.

pkgtruth MCP Server

Install

Related servers

kordoc

pagespeed-insights-mcp

Environment

Tools

About

FAQ

Reviews

Hive Intelligence MCP

Screaming Frog SEO Spider MCP Server (headless)

Assay MCP Server

Kilotest