# PkgGuard (slim)

> PkgGuard, an MCP server by youraitools.co, listed from the official MCP registry. Indexed, not reviewed: facts and our own checks, no score or ranking. Dependency scan for agents: known CVEs and malicious packages via OSV.dev. By Crypto Money Maker

- Full: https://www.anchorterminal.com/tools/youraitools-pkgguard.md (~700 tokens) · this version ~630 tokens · JSON https://www.anchorterminal.com/tools/youraitools-pkgguard.json · canonical https://www.anchorterminal.com/tools/youraitools-pkgguard
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · MCP: https://www.anchorterminal.com/mcp · Updated: 2026-10-30
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)

# PkgGuard

> Indexed, not reviewed: facts from the official MCP registry and our own checks. No score, grade or rank, and not in the rankings until the panel reviews it. How the index works: https://www.anchorterminal.com/indexed/

- Kind: MCP server, by youraitools.co (https://youraitools.co)
- Category: Data providers (https://www.anchorterminal.com/categories/data-providers.md)
- Listed because: It's published in the registry under youraitools.co, a namespace the registry only gives to whoever proves they control that domain.
- What the official MCP registry says: Dependency scan for agents: known CVEs and malicious packages via OSV.dev. By Crypto Money Maker

## Facts

- MCP registry: `co.youraitools/pkgguard` 0.1.1
- Endpoint: https://api.youraitools.co/pkgguard/mcp (streamable HTTP)
- Package: npm `@agentgate-builder/pkgguard` (stdio)
- Website: https://youraitools.co
- npm downloads a week: 580
- Registry entry updated: 2026-10-22

## Tools

- Tools it lists (2, about 494 tokens of context, `tools/list` without credentials, checked 2026-10-30 00:50 UTC):
  - `scan_dependencies` (read-only): Checks a package.json, lockfile, requirements.txt, go.mod, Cargo.lock, poetry.lock or composer.lock (or a list of packages) against OSV.dev for known…
  - `check_package` (read-only): Checks one package version (npm, PyPI, Go, crates.io, Packagist, RubyGems, Maven, NuGet) against OSV.dev: advisory ids, severity, CVSS, fixed-in versions and…
- How its tools read to an agent (0 errors, 1 warning, 1 note, about 494 tokens; rules at https://www.anchorterminal.com/check.md; not part of the score):
  - warn TC13 scan_dependencies: packages[] (object with no properties)
  - note TC24 server: 2 of 2 tools have no outputSchema

- Create a video and download its frames: https://www.anchorterminal.com/assets/listing-video/index.html?listing=youraitools-pkgguard
- JSON: https://www.anchorterminal.com/api/v1/tools/youraitools-pkgguard.json
- Being indexed says nothing about quality, and nobody can pay for it. Ask for a review: https://www.anchorterminal.com/builders/#claiming