Is mcp-auth safe to use?

mcp-auth has no known vulnerabilities on the latest version (0.2.0). DepScope rates its health at 53/100 (high risk).

What is the latest version of mcp-auth?

The latest version of mcp-auth is 0.2.0, released 2026-01-21.

Does mcp-auth have known vulnerabilities?

No known vulnerabilities on the latest version of mcp-auth.

Is mcp-auth deprecated?

No, mcp-auth is actively maintained. Latest release: 0.2.0 (2026-01-21).

What are alternatives to mcp-auth?

Popular alternatives to mcp-auth in npm include: ?, debug, ansi-styles, semver, brace-expansion.

What license does mcp-auth use?

mcp-auth is licensed under MIT.

mcp-auth

npmv0.2.0

Plug and play auth for Model Context Protocol (MCP) servers

License MITpermissive9 versions1 maintainers6 deps28,116 weekly dl

mcp-auth/js

/ 100

Health

use with caution

[email protected] low health (53/100) — consider alternatives

Moderate health score (53/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

10/20

popularity

25/25

security

6/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (6)

@silverhand/essentials camelcase-keys cors jose snakecase-keys zod

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/mcp-auth