Is mcp-oauth safe to use?

mcp-oauth has no known vulnerabilities on the latest version (1.0.0). DepScope rates its health at 37/100 (critical risk).

What is the latest version of mcp-oauth?

The latest version of mcp-oauth is 1.0.0, released 2025-05-25.

Does mcp-oauth have known vulnerabilities?

No known vulnerabilities on the latest version of mcp-oauth.

Is mcp-oauth deprecated?

No, mcp-oauth is actively maintained. Latest release: 1.0.0 (2025-05-25).

What are alternatives to mcp-oauth?

Popular alternatives to mcp-oauth in npm include: semver, ansi-styles, debug, minimatch, brace-expansion.

What license does mcp-oauth use?

mcp-oauth is licensed under MIT.

mcp-oauth

npmv1.0.0

A TypeScript SSE proxy for MCP servers that use stdio transport.

License MITpermissive1 versions1 maintainers3 deps11 weekly dl

punkpeye/mcp-proxy

/ 100

Health

use with caution

[email protected] low health (37/100) — consider alternatives

Moderate health score (37/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

0/20

popularity

25/25

security

0/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (3)

@modelcontextprotocol/sdk eventsource yargs

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/mcp-oauth