Bump Guard MCP Server

Guard your dependency bumps. BumpGuard is a Model Context Protocol (MCP) server that tells your AI coding agent exactly which lines of your code break when you upgrade a dependency - and verifies AI‑written code against the API that is actually installed, so it stops calling functions that don't exist. Its 5 documented tools cluster into read & search, diff, verify, check.

People who work with breaking changes, dependencies and developer tools and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in Python.

VERIFIED ACTIVE

LAST COMMIT 2026-06-17 · ★ 3 · #213 OF 278 MAINTAINED API INTEGRATION · VERIFIED 2026-09-18

MIT · Python servers · how we verify → /methodology

01 · Install Bump Guard

before you install - you'll need

The README does not document required environment variables for a basic install.

Claude Code

claude mcp add appcreationsca-bumpguard-mcp -- uvx bumpguard-mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "appcreationsca-bumpguard-mcp": {
      "command": "uvx",
      "args": [
        "bumpguard-mcp"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license MIT - declared in the repository

pypi package bumpguard-mcp - check the name against the project README before installing (PyPI has no namespace ownership)

registry namespace io.github.appcreationsca is GitHub-verified and matches the repo owner

03 · What Bump Guard can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

What you can build

An agent gets 5 documented tools across read & search, diff, verify, including diff_versions, verify_snippet, check_import, list_symbols.

Capability map

Tools grouped from the project's README - what Bump Guard lets an agent do.

read & search

2 tools - e.g. "What's the real public API of this package?" Discover functions/classes/methods + signatures instead of guessing - for the installed version or any fetched ver; Which ecosystem providers are available.

list_symbols · list_languages

Diff

1 tool - e.g. "What changed between two versions of this library?" The raw breaking‑change list, no code scan - good for planning a migration.

diff_versions

Verify

1 tool - e.g. "Do the imports and API calls in this code really exist here?" Catches hallucinated/typo'd package names (slopsquatting) and attributes that aren't on the insta

verify_snippet

Check

1 tool - e.g. "Is this package installed? If not, what's the closest real name?"

check_import

Latest releases

v0.2.1 · 2026-06-18

Quality/safety fixes from the third pre-launch audit pass. · Fixed · Optional → required parameter changes are now detected as breaking (Python, .NET) instead of being reported "safe to upgrade". A…

v0.2.0 · 2026-06-17

BumpGuard now supports a third ecosystem: Java (Maven). 🎉 · Added · Java (Maven) provider - reads a package's public API directly from compiled .jar bytecode (constant pool, access flags, field/method descriptors…

v0.1.3 · 2026-06-17

Housekeeping release. · Added · Project logo (assets/logo.svg + assets/logo.png, with a reproducible generator) shown at the top of the README and used by directory listings. · No code changes. Install: pip install…

04 · Who maintains Bump Guard

BumpGuard is maintained by appcreationsca. It's the only MCP server we track from this author; the repo dates to Jun 2026.

05 · Facts

repository: github.com/appcreationsca/bumpguard-mcp
category: API integration - ranked #213 of 278 actively-maintained API integration servers as of 2026-09-18.
registry: io.github.appcreationsca/bumpguard (active, first published 2026-06-16 · 5 versions)
packages: pypi:bumpguard-mcp

06 · Bump Guard FAQ

Is Bump Guard still maintained?

Yes - as of 2026-09-18, its last commit was 2026-06-17. We re-verify nightly.

What can Bump Guard do?

An agent gets 5 documented tools across read & search, diff, verify, including diff_versions, verify_snippet, check_import, list_symbols.

How do I install Bump Guard?

Run `uvx bumpguard-mcp`. The README does not document required environment variables for a basic install. You can also paste the ready-made client config above.

Does Bump Guard run locally?

Yes - it's a stdio server: it runs on your machine (via uvx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Bump Guard

Alternatives to Bump Guard

Maintained API integration servers if Bump Guard isn't the fit.

More API integration MCP servers · Claudinho · VK Ads MCP · Yandex Wordstat MCP · Samsara MCP · Sportscore MCP

More Python MCP servers · EPANET MCP Server · Appwrite MCP Server · Mathlas · Safe SSH MCP · Codex Control Plane MCP · see all