DugganUSA CLI - Local STDIO MCP

1.5M+ IOCs. ~38M+ documents. Two binaries. One install. The MCP we'd audit. Supply-chain scanning leveled up. The corpus now ingests OSV malicious-package feeds for both npm and PyPI - named-malicious packages, zero-heuristic, daily - alongside daily GitHub Hunt detections of malware-staging repos and install-time execution signatures. Pipe a lockfile or --file package.json and known-bad packages surface next to…

People connecting security tools to Claude, Cursor, VS Code, or another MCP client. The project is written in JavaScript.

VERIFIED ACTIVE

LAST COMMIT 2026-06-30 · ★ 2 · #108 OF 182 MAINTAINED SECURITY · VERIFIED 2026-08-25

MIT · JavaScript servers · how we verify → /methodology

01 · Install DugganUSA CLI - Local STDIO MCP

before you install - you'll need

Set DUGGANUSA_API_KEY before connecting.

Claude Code

claude mcp add pduggusa-dugganusa-cli -- npx -y dugganusa-cli

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "pduggusa-dugganusa-cli": {
      "command": "npx",
      "args": [
        "-y",
        "dugganusa-cli"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license MIT - declared in the repository

npm package dugganusa-cli - unscoped; check the name against the project README before installing

registry namespace io.github.pduggusa is GitHub-verified and matches the repo owner

03 · What DugganUSA CLI - Local STDIO MCP can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v1.5.2 · 2026-06-30

Aligned in-tool/runtime IOC-count strings to 1.5M+ (vX.Y.1 refreshed the README/docs but missed runtime strings).

v1.5.1 · 2026-06-30

Added · Documented the fourth live validation axis - Liveness (/api/v1/feed-efficacy). · Changed · Refreshed IOC corpus copy to 1.5M+ IOCs (~1.57M live) and ~38M documents across 65 indexes. · Reworded the Timeliness…

v1.1.0 · 2026-05-01

v1.1.0 - Backend perf + cache + Apothecary detection (May 1, 2026) · The DugganUSA threat-intel platform shipped meaningful upstream improvements today; bumping all integrations so the next install/pull lines up…

04 · Who maintains DugganUSA CLI - Local STDIO MCP

DugganUSA CLI - Local STDIO MCP is maintained by pduggusa. We track 3 MCP servers from pduggusa - 2 actively maintained, 2 combined GitHub stars, oldest repo from Apr 2026.

05 · Facts

repository: github.com/pduggusa/dugganusa-cli
website: https://github.com/pduggusa/dugganusa-cli
category: security - ranked #108 of 182 actively-maintained security servers as of 2026-08-25.
release cadence: 2 releases in the last 90 days (latest 2026-06-30)
registry: io.github.pduggusa/dugganusa-cli (active, first published 2026-05-11)
packages: npm:dugganusa-cli

06 · DugganUSA CLI - Local STDIO MCP FAQ

What is DugganUSA CLI - Local STDIO MCP?

Is DugganUSA CLI - Local STDIO MCP still maintained?

Yes - as of 2026-08-25, its last commit was 2026-06-30 and it shipped 2 releases in the last 90 days. We re-verify nightly.

How do I install DugganUSA CLI - Local STDIO MCP?

Run `npx -y dugganusa-cli`. The README documents one environment variable (DUGGANUSA_API_KEY) to set first. Set DUGGANUSA_API_KEY before connecting. You can also paste the ready-made client config above.

Does DugganUSA CLI - Local STDIO MCP run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to DugganUSA CLI - Local STDIO MCP

Alternatives to DugganUSA CLI - Local STDIO MCP

Maintained security servers if DugganUSA CLI - Local STDIO MCP isn't the fit.

Pairs well with

Servers that cover what DugganUSA CLI - Local STDIO MCP doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · Commit - Supply Chain Risk Scoring · SSH · Promptrejectormcp · Royal MCP · Hush

More JavaScript MCP servers · Roast My Design System · Pendpost · Multi Scraper MCP · Gate402 MCP · Dav MCP · see all