# io.github.tiluckdave/hound (npm · hound-mcp)

The dependency bloodhound for AI coding agents. Zero API keys, zero config.

- Trust score: 81/100 (high trust)
- Change this week: +28
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-04

## Components

- npm · `hound-mcp`: 81/100 (this document), [markdown](https://verifymcp.io/servers/tiluckdave-hound/hound-mcp.md), [page](https://verifymcp.io/servers/tiluckdave-hound/hound-mcp)

## Channel facts

- Registry: `npm`
- Package: `hound-mcp`
- Version: `0.2.1`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-04.

- **Supply Chain Security**: 83/100
  - No malware found by supply-chain analysis.
  - CVE check failed: a known medium-severity CVE affects hono 4.12.33, reached via @modelcontextprotocol/sdk > hono. A fixed version is available.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 97/100
  - Source repository is publicly reachable at the declared URL.
  - Cryptographically verified build provenance (signed, bound to tiluckdave/hound-mcp).
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 31 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 88/100
  - 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (excellent).
  - Tool/resource definitions use about 1017 tokens (~84/item across 12 items; 12 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add tiluckdave-hound -- npx -y hound-mcp
```

### Codex

```bash
codex mcp add tiluckdave-hound -- npx -y hound-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "tiluckdave-hound": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "hound-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add tiluckdave-hound --command npx --arg -y --arg hound-mcp
```

### Hermes

```yaml
mcp_servers:
  tiluckdave-hound:
    command: "npx"
    args: ["-y", "hound-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "tiluckdave-hound": {
      "command": "npx",
      "args": [
        "-y",
        "hound-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-04 (score 81, +3)

- [security regression] CVE-2026-69207 affects this package: medium
- [security regression] Known CVEs: partial → fail
- [functional improvement] Stability: unverified → 0.27

### 2026-08-02 (score 78, +55)

- [security regression] Provenance: pass → unverified
- [security regression] Install scripts: pass → unverified
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Malware scan: unverified → pass
- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [security] The attested source repository moved: tiluckdave/hound-mcp
- [functional regression] License: pass → unverified
- [functional regression] Maintenance: pass → unverified
- [functional improvement] Schema quality: unverified → excellent
- [functional improvement] MCP protocol: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Tool coverage: unverified → 100
- [functional improvement] Schema quality: unverified → 100
- [functional] Licence: MIT

### 2026-08-01 (score 23, −37)

- [security regression] Known CVEs: partial → unverified
- [security] Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.
- [functional regression] Capabilities: pass → unverified
- [functional regression] Schema quality: 100 → unverified
- [functional regression] Dependency health: partial → unverified
- [functional regression] Tool coverage: 100 → unverified

### 2026-07-31 (score 60, +54)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 6, −47)

- [security regression] Malware scan: pass → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional regression] Schema quality: 100 → unverified

### 2026-07-27 (score 53)

First indexed and scored.

## MCP tools (12)

### `hound_vulns` (~79 tokens)

List all known vulnerabilities for a specific package version, grouped by severity with fix versions and advisory links.

Input parameters:

- `ecosystem` (string): Package ecosystem (default: npm)
- `name` (string, required): Package name (e.g. express, lodash)
- `version` (string, required): Package version (e.g. 4.18.2)

### `hound_inspect` (~72 tokens)

Get a comprehensive profile of a package version: licenses, vulnerabilities, OpenSSF scorecard, GitHub stats, and dependency count — all in one call.

Input parameters:

- `ecosystem` (string): Package ecosystem (default: npm)
- `name` (string, required): Package name
- `version` (string, required): Package version

### `hound_tree` (~85 tokens)

Show the full resolved dependency tree for a package version, including all transitive dependencies with their depth and relation type.

Input parameters:

- `ecosystem` (string): Package ecosystem (default: npm)
- `maxDepth` (integer): Maximum depth to display (default: 3, max: 10)
- `name` (string, required): Package name
- `version` (string, required): Package version

### `hound_typosquat` (~64 tokens)

Check if a package name looks like a typosquat of a popular package. Generates likely typo variants and checks which ones exist in the registry.

Input parameters:

- `ecosystem` (string): Package ecosystem (default: npm)
- `name` (string, required): Package name to check

### `hound_advisories` (~85 tokens)

Get full details for a security advisory by ID (GHSA, CVE, or OSV ID). Returns title, severity, affected versions, fix versions, and references.

Input parameters:

- `id` (string, required): Advisory ID — e.g. GHSA-rv95-896h-c2vc, CVE-2024-29041, or any OSV ID

### `hound_popular` (~79 tokens)

Scan a list of popular (or user-specified) packages for known vulnerabilities. Quickly surface which widely-used packages in an ecosystem have open security issues.

Input parameters:

- `ecosystem` (string): Package ecosystem (default: npm)
- `packages` (array): Specific package names to check. If omitted, uses a curated list of popular packages for the ecosystem.

### `hound_audit` (~103 tokens)

Scan a project's lockfile for dependency risks. Parses package-lock.json, yarn.lock, pnpm-lock.yaml, requirements.txt, Cargo.lock, or go.sum and batch-queries OSV for vulnerabilities across all dependencies.

Input parameters:

- `lockfile_content` (string, required): Full text content of the lockfile
- `lockfile_name` (string, required): Filename to determine format: package-lock.json, yarn.lock, pnpm-lock.yaml, requirements.txt, Cargo.lock, go.sum

### `hound_compare` (~74 tokens)

Side-by-side comparison of two packages: vulnerabilities, OpenSSF Scorecard, GitHub stars, release recency, and license. Returns a recommendation.

Input parameters:

- `ecosystem` (string): Package ecosystem (default: npm)
- `package_a` (string, required): First package name
- `package_b` (string, required): Second package name

### `hound_license_check` (~136 tokens)

Scan a lockfile for license compliance. Resolves licenses for every dependency and flags packages that violate the chosen policy (permissive, copyleft, or none).

Input parameters:

- `lockfile_content` (string, required): Full text content of the lockfile
- `lockfile_name` (string, required): Filename: package-lock.json, yarn.lock, pnpm-lock.yaml, requirements.txt, Cargo.lock, go.sum
- `policy` (string): License policy to enforce: 'permissive' (MIT/Apache/BSD only), 'copyleft' (allows GPL but not AGPL), 'none' (report only, no violations)

### `hound_preinstall` (~75 tokens)

Safety check before installing a package. Checks known vulnerabilities, typosquatting risk, abandonment, and license concerns. Returns a go/no-go verdict.

Input parameters:

- `ecosystem` (string): Package ecosystem (default: npm)
- `name` (string, required): Package name
- `version` (string): Package version (defaults to latest)

### `hound_score` (~82 tokens)

Compute a 0-100 Hound Score for a package version combining vulnerability severity, OpenSSF Scorecard, release recency, and license risk. Returns a letter grade (A-F) with a breakdown.

Input parameters:

- `ecosystem` (string): Package ecosystem (default: npm)
- `name` (string, required): Package name
- `version` (string, required): Package version

### `hound_upgrade` (~83 tokens)

Find the minimum version upgrade that resolves all known vulnerabilities for a package. Checks every published version and returns the nearest safe one.

Input parameters:

- `ecosystem` (string): Package ecosystem (default: npm)
- `name` (string, required): Package name (e.g. express, lodash)
- `version` (string, required): Current vulnerable version (e.g. 4.17.20)

## Diagnostics

Captured diagnostic sections: Provenance, Vulnerabilities, Dependencies. The full working is on the page: https://verifymcp.io/servers/tiluckdave-hound/hound-mcp#diagnostics

## Score history

- 2026-08-04: 81
- 2026-08-03: 78
- 2026-08-02: 78
- 2026-08-01: 23
- 2026-07-31: 60
- 2026-07-30: 6
- 2026-07-28: 53
- 2026-07-27: 53

## Links

- npm package: https://www.npmjs.com/package/hound-mcp
- Socket report: https://socket.dev/npm/package/hound-mcp
- Repository: https://github.com/tiluckdave/hound-mcp
- Changelog RSS feed: https://verifymcp.io/servers/tiluckdave-hound/hound-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/tiluckdave-hound/hound-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/tiluckdave-hound/hound-mcp