NPM Plus - AI-Powered JavaScript Package Manager | Free MCP Server

Professional MCP server that brings powerful NPM, Yarn, and pnpm management directly to Claude, Windsurf, VS Code, Cursor, and other AI-powered editors. Search packages, audit security, analyze bundles - all with AI assistance.

🤔 What is MCP? Model Context Protocol (MCP) lets AI assistants use real tools. Instead of just suggesting commands, your AI can actually search npm, check security, and analyze packages in real-time. Learn more ↓
15+
Tools Available
3
Package Managers
5+
Editor Support
🏪
On Smithery
📦
🔧
🚀
🤖
💻
Live Coding Demo
$ |

Powerful Package Management for AI Developers

Everything you need to manage JavaScript packages with AI assistance. Search NPM registry, audit security vulnerabilities, analyze bundle sizes, and manage dependencies - all through your favorite AI editor.

🔍

Smart Search

Search npm registry with intelligent relevance scoring and pagination support

📦

Package Management

Install, update, and remove packages across NPM, Yarn, and pnpm

🔒

Security Scanning

Audit dependencies for vulnerabilities with GitHub Advisory Database integration

📊

Bundle Analysis

Check package sizes, analyze dependencies, and optimize your bundles

🌳

Dependency Trees

Visualize dependency relationships and detect circular dependencies

📜

License Management

Track and analyze licenses across all your dependencies

Works with Claude, Windsurf, Cursor & More AI Editors

Seamless MCP integration across all major AI-powered development environments. One-click setup for Claude Desktop, Windsurf, VS Code, Cursor, and any MCP-compatible editor.

📺 Video Tutorials

🧬
Cline
+
📦
NPM Plus
5:42

🧬 Cline Extension Setup

Complete guide to setting up NPM Plus with the Cline extension in VS Code

🎥 Watch on YouTube
🌊
Windsurf
+
📦
NPM Plus
4:28

🌊 Windsurf Integration

Learn how to integrate NPM Plus with Windsurf for AI-powered package management

🎥 Watch on YouTube

Claude

Desktop & Web

Windsurf

Built-in MCP support

VS Code

Via MCP extension

Cursor

Native integration

Cline

MCP compatible

More

Any MCP client

🏪

Available on Smithery

Smithery is the premier registry for Model Context Protocol (MCP) servers. Discover, install, and manage MCP servers with ease. NPM Plus is now officially listed, making it even easier to add powerful JavaScript package management to your AI workflow.

✨ Why Install from Smithery?

One-click installation
Automatic updates
Verified publisher
Community reviews
Usage statistics
Easy configuration
🏪 View on Smithery Registry Learn About Smithery →

Direct Install: smithery install @shacharsol/js-package-manager-mcp

Get Started in 30 Seconds

Add NPM Plus to your AI editor with a simple configuration

1

Copy Configuration

Add the MCP server configuration to your editor

2

Restart Editor

Restart your editor to load the new MCP server

3

Start Using

Ask your AI to search, install, or analyze packages

NPX Installation (Recommended)
{
  "mcpServers": {
    "npmplus-mcp": {
      "command": "npx",
      "args": ["-y", "npmplus-mcp-server"]
    }
  }
}
🚀 Local via NPX (Recommended):
• Automatically downloads latest version
• Runs locally for maximum performance
• Full feature set including package management
• Perfect for development environments
• No rate limits or network dependency
Hosted Service (HTTP Transport)
{
  "mcpServers": {
    "npmplus-mcp": {
      "serverUrl": "https://api.npmplus.dev/mcp"
    }
  }
}
☁️ HTTP Transport Option:
• No local installation required
• Always up-to-date
• For Windsurf: use mcp_config.json with serverUrl
• For other editors: use serverUrl format
• Rate limited (good for light usage)
• Network dependent

⚠️ Cursor Users: HTTP transport causes "Loading tools" issues. Use NPX method only!
claude_desktop_config.json
{
  "mcpServers": {
    "npmplus-mcp": {
      "command": "npx",
      "args": ["-y", "npmplus-mcp-server"]
    }
  }
}
📍 File Location:
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: %APPDATA%\Claude\claude_desktop_config.json
.windsurfrc

NPX Version (Recommended)

{
  "mcp": {
    "servers": {
      "npmplus-mcp": {
        "command": "npx",
        "args": ["-y", "npmplus-mcp-server"],
        "disabled": false
      }
    }
  }
}

HTTP Transport Version

Create mcp_config.json in project root:

{
  "mcpServers": {
    "npmplus-mcp": {
      "serverUrl": "https://api.npmplus.dev/mcp"
    }
  }
}
📍 Setup Steps:
NPX Method:
1. Create .windsurfrc file in your project root
2. Add NPX configuration above
3. Restart Windsurf or reload the window

HTTP Transport Method:
1. Create mcp_config.json file in your project root
2. Add HTTP transport configuration above
3. Restart Windsurf or reload the window

💡 Why NPX is Recommended:
• No rate limits or network dependency
• Full package management features
• Better performance and reliability

💬 How to Use:
• Natural language: "Install express and cors packages"
• Cascade mode: "Update all packages and fix breaking changes"
• Look for "🔧 Using npmplus-mcp" in activity bar

✅ Test: "Show me popular authentication libraries"
MCP Settings

NPX Version (Recommended)

{
  "mcpServers": {
    "npmplus-mcp": {
      "command": "npx",
      "args": ["-y", "npmplus-mcp-server"]
    }
  }
}

⚠️ HTTP Transport (Not Recommended for Cursor)

❌ Known Issues with HTTP Transport in Cursor:
• May cause "Loading tools" errors
• Connection timeouts and instability
• Reduced functionality
Use NPX method above instead
{
  "mcpServers": {
    "npmplus-mcp": {
      "serverUrl": "https://api.npmplus.dev/mcp"
    }
  }
}
📍 Setup Steps:
1. Go to Cursor → Settings → Extensions
2. Find MCP settings and add the NPX configuration
3. Restart Cursor to activate

⚠️ Important for Cursor:
Use NPX ONLY - HTTP transport causes "Loading tools" issues
NPX is stable and reliable for Cursor users
Explicit prompts help: "Use npmplus-mcp to..."
Agent mode increases auto-detection

💬 Example Prompts:
"Use npmplus-mcp to search for testing frameworks"
"Call MCP tools to check bundle size of lodash"
"With npmplus-mcp, audit my dependencies"

✅ Test: "Use npmplus-mcp to find React libraries"
Cline Extension Setup (Complete Guide)

Prerequisites

  • VS Code version 1.102 or later (for full MCP support)
  • Node.js installed on your system
  • Cline extension by saoudrizwan from VS Code marketplace

Setup Methods

Method 1: Automatic Setup (Recommended)

In Cline chat, simply say: "add a tool for JavaScript package management using npmplus-mcp-server"

Cline will automatically configure the MCP server for you!

Method 2: Manual Cline Configuration

  1. Configure AI model at app.cline.bot
  2. In Cline interface: Click "MCP Servers" → "Configure MCP Servers"
  3. Add to cline_mcp_settings.json:
{
  "mcpServers": {
    "npmplus-mcp": {
      "command": "npx",
      "args": ["-y", "npmplus-mcp-server"]
    }
  }
}

Method 3: VS Code Native MCP

For VS Code 1.102+ with native MCP support:

  • Create .vscode/mcp.json in your project, or
  • Use Command Palette: "MCP: Add Server"
  • Use the same JSON configuration as above

Usage

Tools appear automatically in Cline's agent mode

For explicit tool usage, try prompts like:

  • "Use npmplus-mcp to search for react packages"
  • "With NPM Plus, check security vulnerabilities"
  • "@npmplus-mcp find testing libraries"

Troubleshooting

  • Check server status: Look in Cline's "Installed" servers tab
  • Restart server: Use restart button next to MCP server
  • View logs: Click "Show Output" to see server logs
  • Connection issues: Adjust timeout settings (30 seconds to 1 hour)
  • Security: MCP servers run with your local permissions

Security Notes

  • MCP servers run with your local permissions
  • Only install servers from trusted sources
  • Review configuration before enabling servers

🎯 How to Use NPM Plus MCP

🤖 Claude Desktop

Just ask naturally - Claude automatically uses MCP tools:

"Search for React animation libraries"
"Check if lodash has any vulnerabilities"
"What's the bundle size of moment.js?"

✅ Look for: Tool use blocks and structured output

🌊 Windsurf

Natural language queries trigger MCP:

"Install express and cors packages"
"Show me the latest version of typescript"
"Audit my dependencies"
"Migrate from moment to dayjs" (Cascade mode)

✅ Look for: "🔧 Using npmplus-mcp" in activity bar

🎯 Cursor

Multiple ways to invoke:

Chat: "What packages are outdated?"
Composer (Cmd+K): "Find React form libraries"
Explicit: "Use npmplus-mcp to check security"
Natural: "Compare bundle sizes of axios vs fetch"

✅ Look for: Tool usage in chat sidebar + execution time

🧬 Cline Extension

Multiple invocation methods:

Natural: "Search for React testing libraries"
Explicit: "Use npmplus-mcp to audit dependencies"
Direct: "@npmplus-mcp check bundle size of lodash"
Auto: "add a tool for JavaScript package management"

✅ Look for: Tool usage indicators in Cline interface

💡 Agent mode automatically detects when to use tools

💡 Pro Tip: If you don't see tool usage indicators, try being more explicit: "Use NPM Plus to search for..." or "@npmplus-mcp ..."

Available Tools

Comprehensive package management capabilities at your fingertips

🔍 Search & Discovery

search_packages

Search npm registry with advanced filtering

package_info

Get detailed package information and metadata

📦 Package Management

install_packages

Install packages with dev/global options

update_packages

Update packages to latest versions

remove_packages

Remove unwanted packages

check_outdated

Find outdated dependencies

🔒 Security & Auditing

audit_dependencies

Scan for security vulnerabilities

check_vulnerability

Check specific package vulnerabilities

📊 Analysis & Insights

check_bundle_size

Analyze package bundle sizes

dependency_tree

Visualize dependency relationships

analyze_dependencies

Detect circular dependencies and orphans

download_stats

Get package download statistics

📜 License & Utilities

list_licenses

Analyze dependency licenses

check_license

Check specific package license

clean_cache

Clean package manager caches

🤖 What is MCP and Why Should You Care?

🏗️ MCP Architecture

🤖
AI Editor
(Claude, Windsurf, Cursor)
MCP Protocol
📦
NPM Plus
MCP Server
API Calls
🌐
NPM Registry
🔒
Security DB
📊
Bundle Analyzer

Without MCP (Traditional AI)

You: "Search for React testing libraries"

AI: "To search for React testing libraries, you can run: npm search react testing. Some popular options include @testing-library/react and Jest..."

❌ Just gives instructions
❌ Outdated information
❌ You run commands manually

With MCP (NPM Plus)

You: "Search for React testing libraries"

AI + NPM Plus:
🔍 Searching npm registry...
Found 1,247 results:
1. @testing-library/react (v14.1.2)
2. @testing-library/jest-dom (v6.1.5)
3. react-test-renderer (v18.2.0)

✅ Real-time npm data
✅ Actual package versions
✅ Direct execution

🔧 How MCP Works

  1. You ask your AI a question about packages
  2. AI recognizes it needs real npm data
  3. AI calls NPM Plus MCP tools automatically
  4. NPM Plus fetches live data from npm, GitHub, etc.
  5. You get real results, not outdated suggestions
💡 Think of it like this: MCP turns your AI from a advisor who gives suggestions into an assistant who actually does the work. It's like the difference between someone telling you how to search Google vs. someone searching Google for you and showing you the results.
Get Started with MCP Learn More About MCP

✅ How to Know NPM Plus MCP is Working

🔍 Look for These Signs:

✅ MCP IS Active

  • 📊 Real package data with versions
  • 🔧 "Using tool: search_packages" messages
  • ⚡ Live download stats & bundle sizes
  • 🎯 Structured output with icons
  • ⏱️ Execution time shown

❌ MCP NOT Active

  • 📝 Generic suggestions only
  • 🚫 "I would help you..." responses
  • 📅 Outdated package info
  • 💭 "Based on my knowledge..."
  • 🔗 Links to npm website

💡 Quick Test

Ask your AI: "What's the current version of React?"

  • With MCP: "React is currently at version 18.2.0 (checking npm registry...)"
  • Without MCP: "React's latest version as of my last update was 18.x"

Why Choose NPM Plus for AI-Powered Development?

🚀 Fast & Reliable

Our hosted MCP server provides instant package management without local installation. Get started in under 30 seconds with any AI editor supporting Model Context Protocol.

🔒 Security First

Built-in vulnerability scanning with GitHub Advisory Database integration. Audit your dependencies and fix security issues automatically with AI assistance.

📊 Smart Analytics

Bundle size analysis, dependency trees, and download statistics help you make informed decisions about package selection and optimization.

🌍 Universal Support

Works with NPM, Yarn, and pnpm. Compatible with Claude Desktop, Windsurf, Cursor, VS Code, and any editor supporting MCP protocol.

💡 Perfect for AI-Driven Development

NPM Plus transforms how you manage JavaScript packages in AI editors. Instead of switching between terminal and editor, ask your AI assistant to search for packages, check security vulnerabilities, analyze bundle sizes, or manage dependencies. The AI understands your intent and uses our MCP server to execute package management tasks efficiently.

Common AI prompts that work with NPM Plus:

  • "Search for React testing libraries and install the most popular one"
  • "Check if my project has any security vulnerabilities"
  • "What's the bundle size of lodash vs lodash-es?"
  • "Update all my outdated packages to latest versions"
  • "Show me all MIT licensed packages in this project"

📚 Latest Publications & Updates

Stay updated with the latest NPM Plus features, tutorials, and AI development insights