Connect your agent

Check your dependencies with any MCP client.

No account, no key. Streamable HTTP and read-only: your agent sends package names, never versions, and compares the answer with your lockfile.

  1. 01

    Add the MCP server

    Add this address as a remote MCP server in your client: Streamable HTTP, no sign-in.

    mcp server
    https://patchwire.monowire.dev/mcp
  2. 02

    Add one line to AGENTS.md

    At the root of your repository. Zed, Warp, Devin, Gemini CLI, Aider and many more read AGENTS.md (agents.md lists them; Gemini CLI and Aider need one setting).

    AGENTS.md
    At the start of each session, and before you install, upgrade or deploy: call Patchwire get_advisories with the dependency names from package.json, compare the returned ranges with the lockfile, and use latest_safe to pick a fixed version for anything affected.
  3. 03

    Ask your agent

    Ask it to check the project's dependencies: it sends the names in package.json to Patchwire and compares the answer with your lockfile.

Claude Code. Set up in a minute.

One command adds the server, then a SessionStart hook: in every new session, Claude checks before it answers.

Open the Claude Code setup

Set up? Now watch your stacks.

The dashboard shows every alert on the stacks you follow, read every hour from the source.

Open the dashboard