Bump Guard MCP Server

Guard your dependency bumps. BumpGuard is a Model Context Protocol (MCP) server that tells your AI coding agent exactly which lines of your code break when you upgrade a dependency - and verifies AI‑written code against the API that is actually installed, so it stops calling functions that don't exist. Its 5 documented tools cluster into read & search, diff, verify, check.

People connecting API integration tools to Claude, Cursor, VS Code, or another MCP client. The project is written in Python.

VERIFIED ACTIVE

LAST COMMIT 2026-06-17 · ★ 2 · #126 OF 250 MAINTAINED API INTEGRATION · VERIFIED 2026-08-25

MIT · Python servers · how we verify → /methodology

01 · Install Bump Guard

before you install - you'll need

The README does not document required environment variables for a basic install.

Claude Code

claude mcp add appcreationsca-bumpguard-mcp -- uvx bumpguard-mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "appcreationsca-bumpguard-mcp": {
      "command": "uvx",
      "args": [
        "bumpguard-mcp"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license MIT - declared in the repository

pypi package bumpguard-mcp - check the name against the project README before installing (PyPI has no namespace ownership)

registry namespace io.github.appcreationsca is GitHub-verified and matches the repo owner

03 · What Bump Guard can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

What you can build

An agent gets 5 documented tools across read & search, diff, verify, including diff_versions, verify_snippet, check_import, list_symbols.

Capability map

Tools grouped from the project's README - what Bump Guard lets an agent do.

read & search

2 tools - e.g. "What's the real public API of this package?" Discover functions/classes/methods + signatures instead of guessing - for the installed version or any fetched ver; Which ecosystem providers are available.

list_symbols · list_languages

Diff

1 tool - e.g. "What changed between two versions of this library?" The raw breaking‑change list, no code scan - good for planning a migration.

diff_versions

Verify

1 tool - e.g. "Do the imports and API calls in this code really exist here?" Catches hallucinated/typo'd package names (slopsquatting) and attributes that aren't on the insta

verify_snippet

Check

1 tool - e.g. "Is this package installed? If not, what's the closest real name?"

check_import

Latest releases

v0.2.1 · 2026-06-18

Quality/safety fixes from the third pre-launch audit pass. · Fixed · Optional → required parameter changes are now detected as breaking (Python, .NET) instead of being reported "safe to upgrade". A…

v0.2.0 · 2026-06-17

BumpGuard now supports a third ecosystem: Java (Maven). 🎉 · Added · Java (Maven) provider - reads a package's public API directly from compiled .jar bytecode (constant pool, access flags, field/method descriptors…

v0.1.3 · 2026-06-17

Housekeeping release. · Added · Project logo (assets/logo.svg + assets/logo.png, with a reproducible generator) shown at the top of the README and used by directory listings. · No code changes. Install: pip install…

04 · Who maintains Bump Guard

BumpGuard is maintained by appcreationsca. It's the only MCP server we track from this author; the repo dates to Jun 2026.

05 · Facts

repository: github.com/appcreationsca/bumpguard-mcp
category: API integration - ranked #126 of 250 actively-maintained API integration servers as of 2026-08-25.
release cadence: 6 releases in the last 90 days (latest 2026-06-18)
registry: io.github.appcreationsca/bumpguard (active, first published 2026-06-16 · 5 versions)
packages: pypi:bumpguard-mcp

06 · Bump Guard FAQ

Is Bump Guard still maintained?

Yes - as of 2026-08-25, its last commit was 2026-06-17 and it shipped 6 releases in the last 90 days. We re-verify nightly.

What can Bump Guard do?

An agent gets 5 documented tools across read & search, diff, verify, including diff_versions, verify_snippet, check_import, list_symbols.

How do I install Bump Guard?

Run `uvx bumpguard-mcp`. The README does not document required environment variables for a basic install. You can also paste the ready-made client config above.

Does Bump Guard run locally?

Yes - it's a stdio server: it runs on your machine (via uvx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Bump Guard

Alternatives to Bump Guard

Maintained API integration servers if Bump Guard isn't the fit.

More API integration MCP servers · Claudinho · VK Ads MCP · Yandex Wordstat MCP · Sudact · Samsara MCP

More Python MCP servers · EPANET MCP Server · Appwrite MCP Server · Mathlas · Safe SSH MCP · Codex Control Plane MCP · see all