Is @claude-flow/mcp safe to use?

@claude-flow/mcp has no known vulnerabilities on the latest version (3.0.0-alpha.9). DepScope rates its health at 55/100 (high risk).

What is the latest version of @claude-flow/mcp?

The latest version of @claude-flow/mcp is 3.0.0-alpha.9, released 2026-05-09.

Does @claude-flow/mcp have known vulnerabilities?

No known vulnerabilities on the latest version of @claude-flow/mcp.

Is @claude-flow/mcp deprecated?

No, @claude-flow/mcp is actively maintained. Latest release: 3.0.0-alpha.9 (2026-05-09).

What are alternatives to @claude-flow/mcp?

Popular alternatives to @claude-flow/mcp in npm include: ?, semver, debug, minimatch.

What license does @claude-flow/mcp use?

License information for @claude-flow/mcp is not declared in the registry metadata.

@claude-flow/mcp

npmv3.0.0-alpha.9

Standalone MCP (Model Context Protocol) server - stdio/http/websocket transports, connection pooling, tool registry

4 versions1 maintainers5 deps23,914 weekly dl

/ 100

Health

use with caution

@claude-flow/[email protected] low health (55/100) — consider alternatives

Moderate health score (55/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

10/20

popularity

25/25

security

3/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (5)

ws ajv cors helmet express

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@claude-flow/mcp