# dep-diff-mcp

Translates a lockfile diff into a human-readable upgrade plan for npm and PyPI.

## Quick Start

```bash
# Connect this server (installs CLI if needed)
npx -y @smithery/cli@latest mcp add digicatalyst-systems/dep-diff-mcp

# Browse available tools
npx -y @smithery/cli@latest tool list digicatalyst-systems/dep-diff-mcp

# Get full schema for a tool
npx -y @smithery/cli@latest tool get digicatalyst-systems/dep-diff-mcp analyze_package_change

# Call a tool
npx -y @smithery/cli@latest tool call digicatalyst-systems/dep-diff-mcp analyze_package_change '{}'
```

## Direct MCP Connection

Endpoint: `https://dep-diff-mcp--digicatalyst-systems.run.tools`

**Optional config:**
- `githubToken` (query) — GitHub personal access token for higher API rate limits. Without it, 60 req/hr per client.

## Tools (2)

- `analyze_package_change` — Given one package and two versions (from -> to), returns a structured upgrade analysis: semver classification, GitHub r…
- `analyze_packages_bulk` — Analyzes a list of package upgrades in parallel and returns a unified risk report with packages ranked by recommendatio…

```bash
# Get full input/output schema for a tool
npx -y @smithery/cli@latest tool get digicatalyst-systems/dep-diff-mcp <tool-name>
```

## Prompts (2)

- `review_dependabot_pr` (ecosystem, changes) — Generates a user message instructing the model to analyze a list of dependency changes, then call analyze_packages_bulk…
- `explain_package_upgrade` (ecosystem, name, fromVersion, toVersion) — Generates a user message asking the model to analyze a specific package version bump and explain the risk.