Model Context Protocol low risk

Clojars

An MCP server for fetching Clojars dependency information, including latest versions, version existence checks, and version history, designed for integration with Claude.

Connections & Capabilities

Connects To

GitHub

Capabilities

read

Quickstart

Install

npx clojars-deps-server

Config

{
  "mcpServers": {
    "clojars-deps-server": {
      "command": "node",
      "args": ["/path/to/clojars-deps-server/build/index.js"]
    }
  }
}

Exposed MCP Tools (3)

safe

get_clojars_latest_version

Retrieves the latest version of a specified Clojars dependency.

Read-only operation; only retrieves information.

safe

check_clojars_version_exists

Checks if a specific version of a Clojars dependency exists.

Read-only operation; only verifies existence.

safe

get_clojars_history

Retrieves the version history of a specified Clojars dependency.

Read-only operation; only retrieves historical data.

Safety Assessment

This server is generally safe due to its read-only nature and limited scope. Risks are primarily tied to the security and availability of the Clojars repository itself. It is safe to use as long as the Clojars repository is trusted and the returned data is treated as potentially untrusted.

Read-only operations; no write or delete capabilities.
Focused on retrieving metadata about Clojars dependencies.
No authentication required, reducing the risk of credential compromise.
Limited scope; only interacts with Clojars metadata.
Designed for use within a controlled environment like Claude.

Reliance on the availability and security of the Clojars repository.
Potential for information disclosure if dependency names are considered sensitive.
Possible, though unlikely, for Clojars to be compromised and serve malicious data.
No input sanitization mentioned, which could lead to issues if Clojars returns unexpected data.