Remote MCP server that gives an assistant npm and PyPI package metadata, version artifacts, search results and download counts, paid per call via x402.
What you can do
Look up npm package cards: description, links, license, keywords, maintainer names, version count, latest version, timestamps and last-week downloads (npm_package). Fetch exact npm version artifacts: dependency fields, engines, os/cpu, tarball URL, integrity, shasum, unpacked size and publish time (npm_version). Discover npm packages by keyword or name with up to 20 scored hits (npm_search). Read PyPI project cards: summary, URLs, license, requires_python, classifiers, requires_dist, current version and yank status (pypi_project). List PyPI release files with type, size, upload time, yank flags, digests and download URL (pypi_release). Resolve likely PyPI names, including normalized and dot/
When to use it
Useful when an assistant needs to check package details, dependencies, release artifacts or popularity before recommending, installing or upgrading an npm or PyPI package, or when resolving an uncertain package name to live projects.
Requirements
A remote streamable HTTP endpoint; no local runtime, account, API key or header is declared. Calls are paid per successful call in USDC on Base through x402, so a wallet or x402-capable client is needed. Network access to the endpoint and the public registries.
Before you install
Every tool is billed: $0.003 per successful call in USDC on Base, so repeated lookups spend real money. Payment requires a crypto wallet and signing; check spending limits before enabling it. The server returns public registry metadata only and strips publisher and maintainer emails.
Enable the server for the chats that should use its tools.
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Use with an agent
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/dev.pages.scrapemole%2Fpkgs/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.
ScrapeMole Pkgs: npm and PyPI package metadata for AI agents: npm package metadata
Use when you need the public npm registry card for a package (scoped or unscoped): returns description, homepage, bugs URL, repository, license, keywords, maintainers as names only (emails stripped), number of versions, latest dist-tag version, created/modified times, and last-week download count from the official downloads API. Private packages are not supported. Paid tool: x402 USDC on Base, $0.002 per successful call; call without payment to receive the PaymentRequired object.
Parametersnamerequired
npm_version
ScrapeMole Pkgs: npm and PyPI package metadata for AI agents: npm version details
Use when you need the exact published artifact for an npm version: dependencies, optionalDependencies, peerDependencies, bundledDependencies, engines, os/cpu, dist (tarball URL, integrity, shasum, unpacked size), and the version publish time. Give "latest" as version to resolve the current dist-tag. Paid tool: x402 USDC on Base, $0.002 per successful call; call without payment to receive the PaymentRequired object.
Parametersnamerequiredversionrequired
npm_search
ScrapeMole Pkgs: npm and PyPI package metadata for AI agents: npm package search
Use to discover npm packages by keyword or name: returns up to 20 hits with name, version, description, keywords, date, and the registry search score. Publisher and maintainer emails are never returned (names/usernames only when present). Paid tool: x402 USDC on Base, $0.003 per successful call; call without payment to receive the PaymentRequired object.
Parametersqrequiredlimit
pypi_project
ScrapeMole Pkgs: npm and PyPI package metadata for AI agents: PyPI project metadata
Use when you need the public PyPI project card: summary, home_page, project_urls, license, requires_python, a subset of classifiers, requires_dist (capped), current version, and yank status. Author/maintainer emails are omitted or redacted; only display names remain when present. Paid tool: x402 USDC on Base, $0.002 per successful call; call without payment to receive the PaymentRequired object.
Parametersnamerequired
pypi_release
ScrapeMole Pkgs: npm and PyPI package metadata for AI agents: PyPI release files
Use when you need the published artifacts for a specific PyPI version: each file with filename, packagetype (sdist/bdist_wheel…), size, upload time, yank flags, digests (sha256/blake2b/md5) and download URL. Give "latest" as version to use the project's current version. Paid tool: x402 USDC on Base, $0.002 per successful call; call without payment to receive the PaymentRequired object.
Parametersnamerequiredversionrequired
pypi_search
ScrapeMole Pkgs: npm and PyPI package metadata for AI agents: PyPI project name lookup
Use when you have a likely PyPI project name (or a few tokens) and need to resolve it to live projects: tries the query as-is, PEP 503 normalization (lowercase, [-_.] → -), and hyphen/underscore/dot variants, then returns up to "limit" matching projects with summary, version, requires_python and license. This is name resolution, not full-text discovery — prefer exact package names when known. Author emails are redacted. Paid tool: x402 USDC on Base, $0.003 per successful call; call without payment to receive the PaymentRequired object.
Parametersqrequiredlimit
Version history
1
v1.0.0LatestOct 12, 2026
Score
72%
72% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
Reached in the last 30 daysRequired25 pts
Auth declaredRequired10 pts
Tools listedRequired15 pts
DescriptionRequired15 pts
Logo10 pts
Publish an icon in the registry entry.
Documentation15 pts
Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.
LicenseNot applicable
A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.