Is io.github.tiluckdave/hound safe to use?

io.github.tiluckdave/hound has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.tiluckdave/hound?

io.github.tiluckdave/hound supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.tiluckdave/hound do?

io.github.tiluckdave/hound provides 6 tools: Quickstart, Tools, Roadmap, Contributing, Community and 1 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.tiluckdave/hound?

io.github.tiluckdave/hound is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is io.github.tiluckdave/hound actively maintained?

io.github.tiluckdave/hound is actively maintained — last commit was 4 days ago. It has 5 GitHub stars.

io.github.tiluckdave/hound

hound-mcp

The dependency bloodhound for AI coding agents. Zero API keys, zero config.

5 47/wk 6 tools GitHub npm

No known CVEs

No license

Actively maintained

Last commit 4d ago

Works with most clients

Transport: stdio, sse, http

6 tools · ~198 tok

Grade A · 0.1% of 200K ctx

Edit this pageView history

Developer Tools

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "hound": {
      "args": [
        "-y",
        "hound-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-tiluckdave-hound)](https://mcppedia.org/s/io-github-tiluckdave-hound)

Read me

What io.github.tiluckdave/hound does

The dependency bloodhound for AI coding agents.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y 'hound-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

81/100across 5 weighted dimensions

How we score →

0255075100

−19

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked hound-mcp against OSV.dev.

Inventory

Tools (6)

Click any tool to inspect its schema.

~198 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.tiluckdave/hound safe to use?: io.github.tiluckdave/hound has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.tiluckdave/hound?: io.github.tiluckdave/hound supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.tiluckdave/hound do?: io.github.tiluckdave/hound provides 6 tools: Quickstart, Tools, Roadmap, Contributing, Community and 1 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.tiluckdave/hound?: io.github.tiluckdave/hound is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.tiluckdave/hound actively maintained?: io.github.tiluckdave/hound is actively maintained — last commit was 4 days ago. It has 5 GitHub stars.

Similar servers

Others in developer-tools

View all →

XcodeBuildMCP97

A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.

6.0k 2

Jscpd97

Copy/paste detector for programming source code, supports 223 formats. AI-ready with token-efficient reporter, skill and MCP server.

5.8k 1

XcodeBuildMCP97

XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.

6.0k 1

Supabase MCP Server96

Manage Supabase projects — databases, auth, storage, and edge functions

2.8k 4

MCP Security Weekly

Get CVE alerts and security updates for io.github.tiluckdave/hound and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Developer Tools

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "hound": {
      "args": [
        "-y",
        "hound-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-tiluckdave-hound)](https://mcppedia.org/s/io-github-tiluckdave-hound)

Read me

What io.github.tiluckdave/hound does

The dependency bloodhound for AI coding agents.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y 'hound-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

Hound MCP

The dependency bloodhound for AI coding agents.

Hound MCP Deployment Diagram

Why Hound?

AI coding agents recommend and install packages without knowing if they're safe — and most security tools require accounts, API keys, or paid plans to tell you. Hound fixes that: it scans for vulnerabilities, checks licenses, audits dependency trees, and detects typosquatting across 7 ecosystems — zero config, zero API keys, zero cost.

Hound is the only security tool built specifically for AI coding agents — works across npm, PyPI, Go, Cargo, Maven, NuGet, and RubyGems, and plugs into Claude Code, Cursor, VS Code, and any MCP client out of the box.

It uses two fully free, unauthenticated public APIs: deps.dev (Google Open Source Insights) and OSV (Google Open Source Vulnerabilities).

Quickstart

Claude Code

claude mcp add hound -- npx -y hound-mcp

Claude Desktop / Cursor / Windsurf

Add to your MCP config file:

{
  "mcpServers": {
    "hound": {
      "command": "npx",
      "args": ["-y", "hound-mcp"]
    }
  }
}

VS Code (Copilot)

{
  "mcp": {
    "servers": {
      "hound": {
        "type": "stdio",
        "command": "npx",
        "args": ["-y", "hound-mcp"]
      }
    }
  }
}

Config file locations

Client	Config path
Claude Desktop (macOS)	`~/Library/Application Support/Claude/claude_desktop_config.json`
Cursor	`~/.cursor/mcp.json`
Windsurf	`~/.codeium/windsurf/mcp_config.json`

Tools

12 tools → Full reference with example outputs

Tool	What it does
`hound_audit` ⭐	Scan an entire lockfile for vulnerabilities across all dependencies
`hound_score`	0–100 Hound Score (vulns + scorecard + recency + license) with letter grade
`hound_compare`	Side-by-side comparison of two packages with a recommendation
`hound_preinstall`	GO / CAUTION / NO-GO verdict before installing a package
`hound_upgrade`	Find the minimum safe version upgrade that resolves all known vulns
`hound_license_check`	Scan a lockfile for license compliance against a policy
`hound_vulns`	All known vulnerabilities for a package version, grouped by severity
`hound_inspect`	Full package profile — license, vulns, scorecard, stars, dep count
`hound_tree`	Full resolved dependency tree with transitive deps
`hound_typosquat`	Detect typosquatting variants of a package name
`hound_advisories`	Full advisory details by GHSA, CVE, or OSV ID
`hound_popular`	Scan popular packages for known vulnerabilities

Supported ecosystems: npm · pypi · go · maven · cargo · nuget · rubygems

Built-in Prompts

3 prompts yo

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

81/100across 5 weighted dimensions

How we score →

0255075100

−19

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked hound-mcp against OSV.dev.

Inventory

Tools (6)

Click any tool to inspect its schema.

~198 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.tiluckdave/hound safe to use?: io.github.tiluckdave/hound has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.tiluckdave/hound?: io.github.tiluckdave/hound supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.tiluckdave/hound do?: io.github.tiluckdave/hound provides 6 tools: Quickstart, Tools, Roadmap, Contributing, Community and 1 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.tiluckdave/hound?: io.github.tiluckdave/hound is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.tiluckdave/hound actively maintained?: io.github.tiluckdave/hound is actively maintained — last commit was 4 days ago. It has 5 GitHub stars.