Professional MCP server that brings powerful NPM, Yarn, and pnpm management directly to Claude, Windsurf, VS Code, Cursor, and other AI-powered editors. Search packages, audit security, analyze bundles - all with AI assistance. Save AI tokens by getting real-time data instead of outdated training knowledge.
Everything you need to manage JavaScript packages with AI assistance. Search NPM registry, audit security vulnerabilities, analyze bundle sizes, and manage dependencies - all through your favorite AI editor.
Search npm registry with intelligent relevance scoring and pagination support
Install, update, and remove packages across NPM, Yarn, and pnpm
Audit dependencies for vulnerabilities with GitHub Advisory Database integration
Real-time package size analysis with bundlephobia integration
Visualize dependency relationships and detect circular dependencies
Track and analyze licenses across all your dependencies
Get real-time npm data instead of outdated training knowledge. No more hallucinated package versions or obsolete security info - save tokens with accurate, live information.
Seamless MCP integration across all major AI-powered development environments. One-click setup for Claude Desktop, Windsurf, VS Code, Cursor, and any MCP-compatible editor.
Complete guide to setting up NPM Plus with the Cline extension in VS Code
🎥 Watch on YouTubeLearn how to integrate NPM Plus with Windsurf for AI-powered package management
🎥 Watch on YouTubeDesktop & Web
Built-in MCP support
Via MCP extension
Native integration
MCP compatible
Any MCP client
Smithery is the premier registry for Model Context Protocol (MCP) servers. Discover, install, and manage MCP servers with ease. NPM Plus is now officially listed, making it even easier to add powerful JavaScript package management to your AI workflow.
Direct Install: smithery install @shacharsol/js-package-manager-mcp
Add NPM Plus to your AI editor with a simple configuration
Add the MCP server configuration to your editor
Restart your editor to load the new MCP server
Ask your AI to search, install, or analyze packages
{
"mcpServers": {
"npmplus-mcp": {
"command": "npx",
"args": ["-y", "npmplus-mcp-server"]
}
}
}{
"mcpServers": {
"npmplus-mcp": {
"serverUrl": "https://api.npmplus.dev/mcp"
}
}
}mcp_config.json with serverUrlserverUrl format{
"mcpServers": {
"npmplus-mcp": {
"command": "npx",
"args": ["-y", "npmplus-mcp-server"]
}
}
}~/Library/Application Support/Claude/claude_desktop_config.json%APPDATA%\Claude\claude_desktop_config.json
{
"mcp": {
"servers": {
"npmplus-mcp": {
"command": "npx",
"args": ["-y", "npmplus-mcp-server"],
"disabled": false
}
}
}
}Create mcp_config.json in project root:
{
"mcpServers": {
"npmplus-mcp": {
"serverUrl": "https://api.npmplus.dev/mcp"
}
}
}.windsurfrc file in your project rootmcp_config.json file in your project root{
"mcpServers": {
"npmplus-mcp": {
"command": "npx",
"args": ["-y", "npmplus-mcp-server"]
}
}
}{
"mcpServers": {
"npmplus-mcp": {
"serverUrl": "https://api.npmplus.dev/mcp"
}
}
}In Cline chat, simply say: "add a tool for JavaScript package management using npmplus-mcp-server"
Cline will automatically configure the MCP server for you!
cline_mcp_settings.json:{
"mcpServers": {
"npmplus-mcp": {
"command": "npx",
"args": ["-y", "npmplus-mcp-server"]
}
}
}For VS Code 1.102+ with native MCP support:
.vscode/mcp.json in your project, orTools appear automatically in Cline's agent mode
For explicit tool usage, try prompts like:
Just ask naturally - Claude automatically uses MCP tools:
"Search for React animation libraries"
"Check if lodash has any vulnerabilities"
"What's the bundle size of moment.js?"
✅ Look for: Tool use blocks and structured output
Natural language queries trigger MCP:
"Install express and cors packages"
"Show me the latest version of typescript"
"Audit my dependencies"
"Migrate from moment to dayjs" (Cascade mode)
✅ Look for: "🔧 Using npmplus-mcp" in activity bar
Multiple ways to invoke:
Chat: "What packages are outdated?"
Composer (Cmd+K): "Find React form libraries"
Explicit: "Use npmplus-mcp to check security"
Natural: "Compare bundle sizes of axios vs fetch"
✅ Look for: Tool usage in chat sidebar + execution time
Multiple invocation methods:
Natural: "Search for React testing libraries"
Explicit: "Use npmplus-mcp to audit dependencies"
Direct: "@npmplus-mcp check bundle size of lodash"
Auto: "add a tool for JavaScript package management"
✅ Look for: Tool usage indicators in Cline interface
💡 Agent mode automatically detects when to use tools
For tools that analyze your project (dependency tree, audit, licenses):
✅ USE: Full absolute paths
cwd: "/Users/username/my-project"
❌ AVOID: Relative paths in hosted service
cwd: "." (won't work in hosted environment)
💡 Alternative: Provide package.json content directly using 'packageJson' parameter
Enhanced security analysis now available:
💡 If vulnerability check fails, it provides actionable alternatives like running npm audit locally
Comprehensive package management capabilities at your fingertips
Search npm registry with advanced filtering
Get detailed package information and metadata
Install packages with dev/global options
Update packages to latest versions
Remove unwanted packages
Analyze provided package.json for outdated packages or show popular package versions
Scan for security vulnerabilities
Check specific package vulnerabilities
Analyze package bundle sizes
Visualize dependency relationships
Detect circular dependencies and orphans
Get package download statistics
Analyze dependency licenses
Check specific package license
Clear MCP server internal cache and provide cache management guidance
ALL 16/16 tools now fully operational with enhanced install capabilities, intelligent retry logic, and comprehensive error handling
NPM Plus intelligently combines real-time data fetching for information that benefits from live data (package versions, security info, bundle sizes) with expert guidance for operations that require local execution or complex setup.
Fixed: Now properly handles relative paths like "." in all environments
Fixed: Vulnerability checking now works reliably with graceful error handling
Complete: ALL 16/16 tools fully functional with intelligent retry logic
You: "Search for React testing libraries"
AI: "To search for React testing libraries, you can run: npm search react testing. Some popular options include @testing-library/react and Jest..."
❌ Just gives instructions
❌ Outdated information
❌ You run commands manually
You: "Search for React testing libraries"
AI + NPM Plus:
🔍 Searching npm registry...
Found 1,247 results:
1. @testing-library/react (v14.1.2)
2. @testing-library/jest-dom (v6.1.5)
3. react-test-renderer (v18.2.0)
✅ Real-time npm data
✅ Actual package versions
✅ Direct execution
Ask your AI: "What's the current version of React?"
Stop wasting tokens on hallucinated package information. Get accurate, live npm data every time.
Wastes tokens on:
"React 18.2.0 was the latest as of my last update..."
Saves tokens with:
"React is currently at 18.2.0 (verified from npm registry)"
Our hosted MCP server provides instant package management without local installation. Get started in under 30 seconds with any AI editor supporting Model Context Protocol.
Built-in vulnerability scanning with GitHub Advisory Database integration. Audit your dependencies and fix security issues automatically with AI assistance.
Bundle size analysis, dependency trees, and download statistics help you make informed decisions about package selection and optimization.
Works with NPM, Yarn, and pnpm. Compatible with Claude Desktop, Windsurf, Cursor, VS Code, and any editor supporting MCP protocol.
NPM Plus transforms how you manage JavaScript packages in AI editors. Instead of switching between terminal and editor, ask your AI assistant to search for packages, check security vulnerabilities, analyze bundle sizes, or manage dependencies. The AI understands your intent and uses our MCP server to execute package management tasks efficiently.
Common AI prompts that work with NPM Plus:
Stay updated with the latest NPM Plus features, tutorials, and AI development insights
Step-by-step tutorial for integrating NPM Plus with Windsurf IDE, including troubleshooting common issues and advanced configuration options.
Read Tutorial →NPM Plus is now officially listed on Smithery, the premier MCP server registry. Discover, install, and manage MCP servers easily with one-click installation for all your AI development needs.
View on Smithery →Real-world case studies from development teams showing 40% faster package management and improved security posture with NPM Plus.
View Case Study →Deep dive into the algorithms and caching strategies that make NPM Plus lightning-fast for package searches and dependency analysis.
Read Deep Dive →Highlighting amazing community-built extensions and configurations that extend NPM Plus functionality for specialized workflows.
Explore Extensions →Help other developers discover token-saving AI package management!