Is mcp-http-server safe to use?

mcp-http-server has no known vulnerabilities on the latest version (1.2.4). DepScope rates its health at 52/100 (high risk).

What is the latest version of mcp-http-server?

The latest version of mcp-http-server is 1.2.4, released 2025-07-21.

Does mcp-http-server have known vulnerabilities?

No known vulnerabilities on the latest version of mcp-http-server.

Is mcp-http-server deprecated?

No, mcp-http-server is actively maintained. Latest release: 1.2.4 (2025-07-21).

What are alternatives to mcp-http-server?

Popular alternatives to mcp-http-server in npm include: ?, semver, ansi-styles, minimatch, debug.

What license does mcp-http-server use?

mcp-http-server is licensed under MIT.

mcp-http-server

npmv1.2.4

High performance HTTP Server for MCP

License MITpermissive16 versions1 maintainers3 deps3,488 weekly dl

bytedance/UI-TARS-desktop

/ 100

Health

use with caution

[email protected] low health (52/100) — consider alternatives

Moderate health score (52/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

6/20

popularity

25/25

security

9/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (3)

@modelcontextprotocol/sdk express @agent-infra/logger

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/mcp-http-server