Patchwire
Hourly security advisories for JS, AI and web3 packages: ranges, fixes and exploit conditions.
Should I use this
Quality & Safety
Findings (3)
- LOWin get_advisory
- LOWin latest_safe
- LOWin get_platform_bulletins
Based on automated analysis of tool definitions and protocol compliance.
Context Cost
This is the approximate number of tokens consumed each time the server's tools are loaded into a model's context. Higher counts reduce the attention available for other tasks.
Install
One-Click Install
Add this to your `claude_desktop_config.json` file:
{
"mcpServers": {
"patchwire": {
"url": "https://patchwire.monowire.dev/mcp"
}
}
}Remote endpoints
https://patchwire.monowire.dev/mcpstreamable-httpWhat it can do
Tool inventory
Tools (5)
🟢get_advisories(packages)
Security advisories of the last 120 days for npm package names, with vulnerable ranges and fixed versions. Send names only: compare versions on your side.
Input Schema
{
"type": "object",
"properties": {
"packages": {
"minItems": 1,
"maxItems": 50,
"type": "array",
"items": {
"type": "string",
"maxLength": 214,
"pattern": "^(@?[a-z0-9][a-z0-9._~-]*\\/)?[a-z0-9][a-z0-9._~-]*$"
}
}
},
"required": [
"packages"
],
"$schema": "https://json-schema.org/draft/2020-12/schema"
}🟢get_advisory(id)
One advisory by CVE, GHSA, MAL or Patchwire id (aliases resolve, any case): conditions and sources.
Input Schema
{
"type": "object",
"properties": {
"id": {
"type": "string",
"pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{2,119}$"
}
},
"required": [
"id"
],
"$schema": "https://json-schema.org/draft/2020-12/schema"
}🟢latest_safe(package)
The version that fixes every known advisory, per release line of an npm package.
Input Schema
{
"type": "object",
"properties": {
"package": {
"type": "string",
"maxLength": 214,
"pattern": "^(@?[a-z0-9][a-z0-9._~-]*\\/)?[a-z0-9][a-z0-9._~-]*$"
}
},
"required": [
"package"
],
"$schema": "https://json-schema.org/draft/2020-12/schema"
}🟢list_feed(section, severity, days, limit)
The latest advisories, by sector (js, stack, ai, crypto) and severity.
Input Schema
{
"type": "object",
"properties": {
"section": {
"type": "string",
"enum": [
"js",
"stack",
"ai",
"crypto"
]
},
"severity": {
"type": "string",
"enum": [
"critical",
"high",
"medium",
"low",
"watch"
]
},
"days": {
"default": 7,
"type": "integer",
"minimum": 1,
"maximum": 30
},
"limit": {
"default": 20,
"type": "integer",
"minimum": 1,
"maximum": 50
}
},
"$schema": "https://json-schema.org/draft/2020-12/schema"
}🟢get_platform_bulletins(platform)
Advisories and announced changes of hosting and data platforms (Vercel, Supabase, Neon...).
Input Schema
{
"type": "object",
"properties": {
"platform": {
"type": "string",
"enum": [
"vercel",
"supabase",
"cloudflare",
"railway",
"neon",
"postgres",
"clerk"
]
}
},
"$schema": "https://json-schema.org/draft/2020-12/schema"
}Community
Evidence