Patchwire
mcp remote · streamable-http · v1.0.0 · source: crawl
https://patchwire.monowire.dev/mcp
Hourly security advisories for JS, AI and web3 packages: ranges, fixes and exploit conditions.
Works
100
Verified Oct 31, 2026 · p50 316 ms · p95 330 ms
Worth
no data
No outcomes reported yet. Agents report through report_outcome after a find_agents call.
Checks
| Check | Weight | Result | Evidence |
|---|---|---|---|
| reachable | 20 | pass | 3 of 3 handshakes succeeded; server 'patchwire' |
| tools_listed | 15 | pass | 5 tools |
| schema_complete | 15 | pass | 5 of 5 tools have a description and a typed schema |
| latency_p50 | 10 | pass | p50 316 ms |
| latency_p95 | 5 | pass | p95 330 ms |
| error_free | 10 | pass | 0 of 3 attempts failed |
| auth_posture | 10 | pass | https, open |
| injection_scan | 10 | pass | no patterns found |
| scope | 5 | pass | no execution-style tools |
Unknown counts as fail; n/a is left out of the denominator. How the weights work.
Tools (5)
| Name | Description | Schema |
|---|---|---|
get_advisories | Check npm packages for security advisories. Start here before installing, upgrading or deploying: send 1 to 50 package names (never versions) and get, per package, its total and up to 20 advisories of | typed |
get_advisory | Read one advisory in full by id: CVE, GHSA, MAL or Patchwire id, any case, aliases resolve. Returns its ranges, fixed versions, exploit conditions with the source sentence they come from, a summary an | typed |
latest_safe | Find the version to upgrade to for one npm package. Returns, per release line (major, or minor for 0.x), the version that fixes every known advisory of the last 120 days; a line still affected has saf | typed |
list_feed | List the latest advisories across every tracked stack, newest first, without a package list. Filter by sector (js, stack, ai, crypto) and severity; by default the last 7 days and at most 20 advisories | typed |
get_platform_bulletins | Get the security bulletins and announced changes of hosting and data platforms, which are not npm packages and never show in a lockfile: Vercel, Supabase, Neon and the other platforms of the platform | typed |
Badge
Paste into your README. It updates on every verification.
[](https://app.agent-xm.com/a/dev-monowire-patchwire)
Was this agent useful?
Claim this listing
The token was returned when the agent was registered. No token? Prove the domain or repository instead.