Patchwire

Hourly security advisories for JS, AI and web3 packages: ranges, fixes and exploit conditions.

Should I use this

Quality & Safety

B
Description quality
74%
Schema completeness
76%
Naming quality
96%
Poisoning risk
100%
Permission match
100%
Protocol compliance
100%

Findings (3)

  • LOWTool 'get_advisory' description lacks action verbin get_advisory
  • LOWTool 'latest_safe' description lacks action verbin latest_safe
  • LOWTool 'get_platform_bulletins' description lacks action verbin get_platform_bulletins

Based on automated analysis of tool definitions and protocol compliance.

Context Cost

~709Tokens (tool definitions)
~738 BTypical response size
Moderate attention impact (0.55% of 128k context)

This is the approximate number of tokens consumed each time the server's tools are loaded into a model's context. Higher counts reduce the attention available for other tasks.

Install

One-Click Install

Add this to your `claude_desktop_config.json` file:

{
  "mcpServers": {
    "patchwire": {
      "url": "https://patchwire.monowire.dev/mcp"
    }
  }
}

Remote endpoints

https://patchwire.monowire.dev/mcpstreamable-http

What it can do

Tool inventory

Tools (5)

🟢 Read-only🟡 Write🔴 Delete⚪ Unknown
🟢get_advisories(packages)

Security advisories of the last 120 days for npm package names, with vulnerable ranges and fixed versions. Send names only: compare versions on your side.

Input Schema

{
  "type": "object",
  "properties": {
    "packages": {
      "minItems": 1,
      "maxItems": 50,
      "type": "array",
      "items": {
        "type": "string",
        "maxLength": 214,
        "pattern": "^(@?[a-z0-9][a-z0-9._~-]*\\/)?[a-z0-9][a-z0-9._~-]*$"
      }
    }
  },
  "required": [
    "packages"
  ],
  "$schema": "https://json-schema.org/draft/2020-12/schema"
}
🟢get_advisory(id)

One advisory by CVE, GHSA, MAL or Patchwire id (aliases resolve, any case): conditions and sources.

Input Schema

{
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "pattern": "^[A-Za-z0-9][A-Za-z0-9._:-]{2,119}$"
    }
  },
  "required": [
    "id"
  ],
  "$schema": "https://json-schema.org/draft/2020-12/schema"
}
🟢latest_safe(package)

The version that fixes every known advisory, per release line of an npm package.

Input Schema

{
  "type": "object",
  "properties": {
    "package": {
      "type": "string",
      "maxLength": 214,
      "pattern": "^(@?[a-z0-9][a-z0-9._~-]*\\/)?[a-z0-9][a-z0-9._~-]*$"
    }
  },
  "required": [
    "package"
  ],
  "$schema": "https://json-schema.org/draft/2020-12/schema"
}
🟢list_feed(section, severity, days, limit)

The latest advisories, by sector (js, stack, ai, crypto) and severity.

Input Schema

{
  "type": "object",
  "properties": {
    "section": {
      "type": "string",
      "enum": [
        "js",
        "stack",
        "ai",
        "crypto"
      ]
    },
    "severity": {
      "type": "string",
      "enum": [
        "critical",
        "high",
        "medium",
        "low",
        "watch"
      ]
    },
    "days": {
      "default": 7,
      "type": "integer",
      "minimum": 1,
      "maximum": 30
    },
    "limit": {
      "default": 20,
      "type": "integer",
      "minimum": 1,
      "maximum": 50
    }
  },
  "$schema": "https://json-schema.org/draft/2020-12/schema"
}
🟢get_platform_bulletins(platform)

Advisories and announced changes of hosting and data platforms (Vercel, Supabase, Neon...).

Input Schema

{
  "type": "object",
  "properties": {
    "platform": {
      "type": "string",
      "enum": [
        "vercel",
        "supabase",
        "cloudflare",
        "railway",
        "neon",
        "postgres",
        "clerk"
      ]
    }
  },
  "$schema": "https://json-schema.org/draft/2020-12/schema"
}

Community

Rate this Server

Evidence

Recent observations

verifiedversion not recorded5 tools