Sourced

dev.sourcedPublished by sourced.devOfficial publisherv1.0.1Updated Oct 24, 2026

Source code search for every package on PyPI and npm.

VerifiedStreamable HTTPWeb executableKnowledge & Memory Developer Tools

Server details

Identifier: dev.sourced/sourced
Transport: Streamable HTTP
Runtime: Web executable
Trust: Verified
Published: Sep 16, 2026

Security note

MCP servers receive tool arguments from a conversation and may perform external actions. Review what a server can do before you enable it, and give it only the access it needs.

The registry verified that this server's namespace belongs to sourced.dev, which also runs its endpoint. That identifies the publisher; it does not make the server's tools safe.

SourceWeft's checks cover whether the listing is complete and the endpoint answered; they do not review the server's code or what its tools do.

Add a badge to your README

Show readers this MCP server is listed on SourceWeft. The badge links to this page.

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/dev.sourced%2Fsourced.svg)](https://sourceweft.com/mcp/dev.sourced%2Fsourced?utm_source=readme&utm_medium=badge)

Overview

AI-generated overview

Remote MCP server that lets coding agents read, search and navigate the source code of PyPI and npm packages.

What you can do: Read a file from a package's source code with line numbers
Search a package's source tree for a regex pattern
Find files matching a glob pattern within a package
All tools take an ecosystem (PyPI or npm), a package name and an optional version, defaulting to latest
When to use it: Useful when a coding agent needs to inspect how a dependency actually works instead of relying on training data or web searches, for example to check an API, trace a bug or confirm behavior in a specific package version.
Requirements: A remote endpoint at mcp.sourced.dev over streamable HTTP; no local package or runtime. The documented installer authorizes with GitHub, creates an API key and configures supported coding agents, so a GitHub account is needed for that path.

Before you install

The installer script authorizes with GitHub and creates an API key, so review what it writes into your agent configuration. Package source and the package names and versions you query are sent to a third-party service. The manifest declares no authentication, while the README describes GitHub-based authorization and an API key.

Installation

In SourceWeft

Open Sourced in the dashboard and add it to a workspace.
Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/dev.sourced%2Fsourced/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "sourced": {
      "type": "http",
      "url": "https://mcp.sourced.dev/mcp"
    }
  }
}

README

Sourced.dev

[Website] [License] [PyPI Packages] [npm Packages] [MCP]

Source code search for every package on PyPI and npm.

Sourced.dev provides coding agents with direct access to dependency source code through the Model Context Protocol (MCP). Instead of relying on training data or web searches, agents can read, search, and navigate the actual source of any package — as if it were on your local machine.

Currently tracking all 800,000+ Python packages and all 3,000,000+ npm packages. New releases are indexed within 5 minutes of publication.

Quick Start

Install the MCP server in one command. It authenticates via GitHub and configures your coding agents automatically:

The installer will:

Authorize with GitHub.
Create an API key.
Configure the MCP server for your selected agents.

Restart your coding agents after installation to start using Sourced.

Supported Agents

The following coding agents are supported out of the box:

Capabilities

Sourced.dev exposes the following tools to your coding agent via MCP:

All tools accept an ecosystem (e.g. pypi, npm), a package_name, and an optional version (defaults to latest).

Ecosystem Support

PyPI — 800,000+ packages
npm — 3,000,000+ packages
Maven/Gradle — planned
RubyGems — planned
Crates.io (Rust) — planned

Next Steps

Visit sourced.dev to learn more.
View the Issues page to see open tasks or report a bug.
Open a Pull Request to contribute.

License

MIT License — see LICENSE for details.

Source: README.md at commit e58ee01

Tools

SourceWeft has not read this server's tools yet.

Version history

v1.0.1LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

Reached in the last 30 daysRequired25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
Auth declaredRequired10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
DescriptionRequired15 pts
Logo10 pts
Documentation15 pts
License10 pts

Tool	Description
`read`	Read a file from a package's source code with line numbers.
`grep`	Search for a regex pattern across a package's source tree.
`glob`	Find files matching a glob pattern within a package.