MCP server intelligence profile

locklens MCP Server

Audits package lockfiles for vulnerabilities, supporting npm, yarn, and pnpm. Runs via CLI or as an MCP server over stdio

Local OnlyBARMPlus

1Distribution channel

1Independently observed tools

0Linked remote endpoints

AvailableVersion intelligence

Detailed security scan evidence is not public for this MCP yet. Public identity, registry metadata, and independently observed protocol inventory remain available.

Install and connect

Installation and connection instructions are shown only when supported by retained package, repository, or endpoint evidence.

Install locklens from npm

Version 1.1.8 declares 1 executable entrypoint.

npm install --save-exact locklens@1.1.8

npx -y -p locklens@1.1.8 locklens

MCP client configuration example

{
  "mcpServers": {
    "locklens": {
      "command": "npx",
      "args": [
        "-y",
        "-p",
        "locklens@1.1.8",
        "locklens"
      ]
    }
  }
}

Identity

Canonical slug	`locklens-8a65fd99`	Deployment	Local Only
Canonical package	npm:locklens	Repository	BARMPlus/locklens
First published	—	Latest release	—
Last security verification	—	Classification confidence	90%
Publication	Draft	Official distribution	Not verified

Distributions

Channel	Identifier	Current version	Versions	Source
npm	locklens	`1.1.8`	8	Repository

Current release

Package	Version	Published / observed	Inventory	Security scan
npmlocklens	`1.1.8`Current	Sep 5, 2026	1 toolsSucceeded · 1 resources · 0 prompts	Evidence restricted

Enterprise protection

Continuously monitor this MCP for security risk

Independently scan the exact version your agents use, receive alerts when its risk changes, and investigate every finding with retained version evidence.

Independent exact-version security scans
Continuous release and vulnerability monitoring
Risk-change alerts with capability context
Historical evidence and API exports

Custom pricingContact salesTailored to your organization, integrations, data needs, and support requirements.

Current version evidence

No public current-version evidence is available yet.

Current protocol inventory

2025-06-18Negotiated protocol

locklensServer-reported name

2Capability groups

Aug 15, 2026Observed

Tools 1

Tool	Category	Annotations	Risk
package_auditAudit a local project or remote Git repository lockfile and return normalized package vulnerability results. Input schema { "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "source": { "type": "string", "description": "Required. Local directory path or remote Git repository URL" }, "threshold": { "description": "Minimum threshold that controls the returned advisories list. Defaults to low.", "type": "string", "enum": [ "low", "moderate", "high", "critical" ] }, "registry": { "description": "Custom registry URL used during audit execution. Defaults to https://registry.npmjs.org/.", "type": "string" }, "skipDev": { "description": "Whether to skip dev dependencies during audit", "type": "boolean" }, "retryCount": { "description": "Retry count passed to the audit executor", "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "outputFormat": { "description": "Response format. Defaults to text.", "type": "string", "enum": [ "json", "text" ] }, "outputFormatLanguage": { "description": "Text report language. Defaults to zh.", "type": "string", "enum": [ "zh", "en" ] } }, "required": [ "source" ] }	—		—

Tool

Category

Annotations

Risk

package_auditAudit a local project or remote Git repository lockfile and return normalized package vulnerability results.

Input schema

{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "source": {
      "type": "string",
      "description": "Required. Local directory path or remote Git repository URL"
    },
    "threshold": {
      "description": "Minimum threshold that controls the returned advisories list. Defaults to low.",
      "type": "string",
      "enum": [
        "low",
        "moderate",
        "high",
        "critical"
      ]
    },
    "registry": {
      "description": "Custom registry URL used during audit execution. Defaults to https://registry.npmjs.org/.",
      "type": "string"
    },
    "skipDev": {
      "description": "Whether to skip dev dependencies during audit",
      "type": "boolean"
    },
    "retryCount": {
      "description": "Retry count passed to the audit executor",
      "type": "integer",
      "minimum": 0,
      "maximum": 9007199254740991
    },
    "outputFormat": {
      "description": "Response format. Defaults to text.",
      "type": "string",
      "enum": [
        "json",
        "text"
      ]
    },
    "outputFormatLanguage": {
      "description": "Text report language. Defaults to zh.",
      "type": "string",
      "enum": [
        "zh",
        "en"
      ]
    }
  },
  "required": [
    "source"
  ]
}

—

Resources 1

package-audit-guidelocklens://guides/package-audit
package_audit 的最小使用指南，包含默认值、输入规则、私有仓库接入方式和常见示例。

Resource templates 0

None observed.

Prompts 0

None observed.

Remote endpoints

Endpoint	Transport	Authentication	Health	Observed
No verified remote endpoint is linked.

locklens MCP Server questions

How do I install locklens MCP Server?

Install the selected package version with: npm install --save-exact locklens@1.1.8

What tools does locklens MCP Server provide?

locklens MCP Server exposed 1 tool during independent protocol observation, including package_audit.

Is locklens MCP Server secure?

The selected current version does not yet have completed public verification. Unknown does not mean clean or vulnerable.

Explore related MCP server guides

Curated product and capability guides containing this catalog record.

Official vs Community MCP Servers