Ground truth about npm packages for AI coding agents. Catches hallucinated and slopsquatted dependencies before they reach your lockfile.
Setup
Choose your client, copy the config, then fill in any required environment variables.
claude mcp add pkgtruth -- npx -y pkgtruth~/.codex/config.toml
[mcp_servers.pkgtruth]
command = "npx"
args = ["-y", "pkgtruth"]
# codex mcp add pkgtruth -- npx -y pkgtruth~/.cursor/mcp.json
{
"mcpServers": {
"pkgtruth": {
"command": "npx",
"args": [
"-y",
"pkgtruth"
]
}
}
}.vscode/mcp.json
{
"servers": {
"pkgtruth": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"pkgtruth"
]
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"pkgtruth": {
"command": "npx",
"args": [
"-y",
"pkgtruth"
]
}
}
}claude_desktop_config.json
{
"mcpServers": {
"pkgtruth": {
"command": "npx",
"args": [
"-y",
"pkgtruth"
]
}
}
}.trae/mcp.json
{
"mcpServers": {
"pkgtruth": {
"command": "npx",
"args": [
"-y",
"pkgtruth"
]
}
}
}