GiberelinSubmitted October 18, 2026

Dep Bouncer, an MCP that vets npm releases before AI agents install them

An MCP app on the Model Context Protocol built by Giberelin at the Heapify Global Community NitroStack × MCP To The Moon hackathon and deployed on NitroStack.

About this project

npm install, reimagined for AI agents. AI coding agents (Claude Code, Cursor, Copilot) now run npm install in seconds without reading a line of code. Hijacked releases of trusted packages reach users hours before any advisory exists: when axios was hijacked in March 2026, the first public advisory came almost 3 hours later, and npm audit reported 0 vulnerabilities the whole time. Feed-based checkers only know about attacks that were already reported. Dep Bouncer is an MCP server the agent asks before it installs anything. Instead of waiting for a feed, it judges a release against the package's own history: did the publisher change, did CI provenance disappear, did new install scripts appear, which dependencies were added, and what changed in the code. The agent gets ALLOW, REVIEW or BLOCK with the evidence, plus the newest safe version to install instead, so it can fix the problem on its own. Who it's for: developers and teams who let AI agents touch their dependencies. A guard hook for Claude Code and Cursor checks the agent's own install commands before they run. What makes it special: it catches hijacks of real, trusted packages with no advisory yet, including keyv, which had a valid provenance signature. Results: 5/5 replayed real-world hijacks blocked (axios, keyv, chalk, nx, @ctrl/tinycolor); top 200 npm packages: 199 ALLOW, 1 REVIEW, 0 false BLOCK; 220 tests; two independent security reviews with every finding fixed; live on NitroCloud.

Live MCP appSource codeLive MCP serverMCP endpointNitroStack Sample Apps PRGitHub release v1.0.0

Team Giberelin

  • HARSHA BSLead

    X
← All Heapify Global Community projects

Frequently asked questions

What does Dep Bouncer, an MCP that vets npm releases before AI agents install them do?
npm install, reimagined for AI agents. AI coding agents (Claude Code, Cursor, Copilot) now run npm install in seconds without reading a line of code. Hijacked releases of trusted packages reach users hours before any advisory exists: when axios was hijacked in March 2026, the first public advisory came almost 3 hours later, and npm audit reported 0 vulnerabilities the whole time. Feed-based checkers only know about attacks that were already reported. Dep Bouncer is an MCP server the agent asks before it installs anything. Instead of waiting for a feed, it judges a release against the package's own history: did the publisher change, did CI provenance disappear, did new install scripts appear, which dependencies were added, and what changed in the code. The agent gets ALLOW, REVIEW or BLOCK with the evidence, plus the newest safe version to install instead, so it can fix the problem on its own. Who it's for: developers and teams who let AI agents touch their dependencies. A guard hook for Claude Code and Cursor checks the agent's own install commands before they run. What makes it special: it catches hijacks of real, trusted packages with no advisory yet, including keyv, which had a valid provenance signature. Results: 5/5 replayed real-world hijacks blocked (axios, keyv, chalk, nx, @ctrl/tinycolor); top 200 npm packages: 199 ALLOW, 1 REVIEW, 0 false BLOCK; 220 tests; two independent security reviews with every finding fixed; live on NitroCloud.
Who built Dep Bouncer, an MCP that vets npm releases before AI agents install them?
Dep Bouncer, an MCP that vets npm releases before AI agents install them was built by team Giberelin at the Heapify Global Community NitroStack × MCP To The Moon hackathon.
What is an MCP app and how is it built?
An MCP app is an application built on the Model Context Protocol — an open standard that lets AI agents connect to tools, data, and APIs. This project exposes MCP tools and resources that agentic AI systems can call. It was built and deployed on NitroStack, the full-stack platform for shipping MCP apps and servers.