MCP Hub
Back to servers

PatternStack

Provides crowdsourced package intelligence and security alerts for AI coding assistants by analyzing project dependencies and framework co-occurrence. It enables automated project scans, package alternative discovery, and data-driven recommendations across multiple programming ecosystems.

Updated
Jan 29, 2026

🪸 @patternstack/mcp

PatternStack MCP Server - Crowdsourced package intelligence for AI coding assistants. Like Waze, but for your dependencies.

Features

  • 🔮 Automatic Insights - Zero prompting required. Insights surface as you code.
  • 🔍 Framework Detection - Scans package files to detect your tech stack
  • 🛤️ Crowdsourced Data - See what real projects use together
  • 🔒 Security Alerts - CVE warnings via Dependabot/GitHub Advisory Database
  • Always Current - 30-day half-life ensures fresh, relevant data

Quick Start

npx -y @patternstack/mcp patternstack-v4

Setup

1. Get Your API Key

Visit patternstack.ai/dashboard/keys and generate an API key.

2. Add to Your MCP Config

Claude Desktop (~/Library/Application Support/Claude/claude_desktop_config.json):

{
  "mcpServers": {
    "patternstack": {
      "command": "npx",
      "args": ["-y", "@patternstack/mcp", "patternstack-v4"],
      "env": {
        "PATTERNSTACK_API_KEY": "your-api-key-here"
      }
    }
  }
}

Workspace API keys: add your user ID so PatternStack can verify workspace membership on each request:

{
  "mcpServers": {
    "patternstack": {
      "command": "npx",
      "args": ["-y", "@patternstack/mcp", "patternstack-v4"],
      "env": {
        "PATTERNSTACK_API_KEY": "ps_ws_...",
        "PATTERNSTACK_CLERK_USER_ID": "user_..."
      }
    }
  }
}

Claude Code (~/.claude/settings.json):

{
  "mcpServers": {
    "patternstack": {
      "command": "npx",
      "args": ["-y", "@patternstack/mcp", "patternstack-v4"],
      "env": {
        "PATTERNSTACK_API_KEY": "your-api-key-here"
      }
    }
  }
}

3. Run init

After restarting your AI assistant, type:

init

This verifies your API key, detects your tech stack, and confirms everything is working.

API Key Configuration

The MCP client looks for API keys in this order (first found wins):

PrioritySourceDescription
1Environment VariablePATTERNSTACK_API_KEY in MCP config
2.patternstack fileJSON file in project root: { "apiKey": "..." }
3.env filePATTERNSTACK_API_KEY=... in project .env
4Global config~/.patternstackrc with { "apiKey": "..." }

Free includes full MCP access: Free accounts get full MCP access with 500 requests/day. Workspace (1,000/day) and Premium (5,000/day) tiers offer higher limits for teams.

Workspace keys require a user ID: set PATTERNSTACK_CLERK_USER_ID (or PATTERNSTACK_USER_ID) in your MCP config env so PatternStack can verify you’re still an active workspace member.

Best Practice: Use environment variable in MCP config for security. Never commit API keys to version control.

MCP Tools

ToolDescriptionTier
initInitialize PatternStack, validate API key, auto-discover configWorkspace+
scan_projectFull scan with framework detection, security, and recommendationsWorkspace+
patternstack_analyzeQuick local analysis without persistingWorkspace+
patternstack_alternativesFind alternatives to a package with adoption statsWorkspace+
patternstack_securityCheck for security vulnerabilitiesWorkspace+
patternstack_trendsGet trending packages in an ecosystemWorkspace+
patternstack_insightsGet suggestions Claude should offer you (collaborative)Workspace+
search_packagesSearch packages by name or category with trend/health dataWorkspace+
compare_packagesCompare multiple packages with scores and recommendationsWorkspace+
migration_guideGet migration guidance for deprecated/declining packagesPremium
ai_insightAI-powered package explanations and recommendationsPremium

Note: Framework parameters only accept Tier 1 application frameworks (Next.js, Django, Rails, etc.), not UI libraries (React, Vue). For React projects, use next, remix, or gatsby as the framework.

How It Works

Real Projects → Package Files → Co-occurrence Counts → Temporal Weighting → Recommendations
              (Empirical)       (Crowdsourced)         (Time-decay)         (Data-driven)

No AI/ML - Pure statistics from real project data:

  • PackageCooccurrence table stores actual counts from real projects
  • 30-day half-life decay weights recent data more heavily
  • Adoption rates are real: count / totalProjectsWithA

Supported Ecosystems

  • JavaScript/TypeScript (npm)
  • Python (PyPI)
  • Go (go.mod)
  • Rust (Cargo)
  • Ruby (Bundler)
  • PHP (Composer)
  • Elixir (Hex)
  • Java/Kotlin (Maven)
  • C#/.NET (NuGet)
  • Dart/Flutter (Pub)
  • Swift (SwiftPM)

Development

cd packages/mcp-server
npm install
npm run build
npm run dev

License

MIT

Reviews

No reviews yet

Sign in to write a review