4da Mcp Server
by runyourempirecommunityv4.6.0
An MCP server that scans project dependency manifests and lockfiles to provide live vulnerability checks, dependency health scores, upgrade planning, ecosystem news, and persistent decision/agent memory. It supports npm, Rust (crates.io), Python (PyPI), and Go, and can run standalone without the 4DA desktop app.
From the registry: Dependency intelligence for AI agents. CVE scanning, health checks, upgrade planning.
Install & configure
Prerequisites
- required
Install in your client
Paste into the AI you're chatting with — it will figure out the rest
Please install the `4da-mcp-server` MCP server into my current AI client (that's you).
Required prerequisites (do these first if not already done):
- **Install Node.js** — Node.js 18 or newer is required to run the server via npx. (https://nodejs.org/.)
Canonical MCP server config (stdio transport):
- command: `npx`
- args: ["@4da/mcp-server"]
- optional environment variables:
- `FOURDA_DB_PATH`: Path to 4DA's SQLite database. (example: `<path-to-4da-sqlite-db>`)
- `FOURDA_OFFLINE`: Disable all network calls when set to true. (example: `true`)
Note: The README also documents an HTTP mode (`npx @4da/mcp-server --http --port 4840`), but it does not provide a canonical URL to configure for an HTTP client, so the extracted install shape uses the default stdio transport. No API keys or accounts are required.
Add this MCP server to my current client's config in the correct format for you. If you need secrets or credentials I haven't provided, ASK me — do not invent values or leave raw placeholders. After adding it, tell me how to verify the server is connected.Note: The README also documents an HTTP mode (`npx @4da/mcp-server --http --port 4840`), but it does not provide a canonical URL to configure for an HTTP client, so the extracted install shape uses the default stdio transport. No API keys or accounts are required.
Tools (14)
vulnerability_scan
Live CVE scanning via OSV.dev, including severity, fix versions, and CVSS scores.
dependency_health
Calculates a 0-100 health score with version freshness, deprecation, and CVE counts per dependency.
upgrade_planner
Ranks upgrade recommendations, separating quick wins from breaking changes.
what_should_i_know
Provides a pre-task intelligence briefing with vulnerabilities, decisions, signals, and ecosystem updates.
ecosystem_pulse
Shows live ecosystem news from Hacker News filtered by the detected tech stack.
get_context
Returns the tech stack, resolved dependency versions, interests, and affinities.
get_relevant_content
Scores content such as articles, advisories, and releases by relevance.
get_actionable_signals
Classifies alerts like security advisories, breaking changes, and trending repositories.
knowledge_gaps
Surfaces dependencies used often but not read about, including missed CVEs and updates.
record_feedback
Saves or dismisses items to improve future scoring.
decision_memory
Records, queries, and manages architectural decisions across sessions.
check_decision_alignment
Environment variables
FOURDA_DB_PATHPath to 4DA's SQLite database.FOURDA_OFFLINEDisables all network calls.Packages
@4da/mcp-server
npmv4.6.0transport: stdio
Details
- Language
- Rust
- License
- NOASSERTION
- Released
- Apr 27, 2026
- Last commit
- Jun 17, 2026
- Registry name
- io.github.runyourempire/4da-mcp-server