BumpGuard — Claude Code MCP server: dependency upgrade checks
Tells you which lines of your own code break when a dependency is upgraded, and checks AI-written code against the package version you actually have.
claude mcp add bumpguard -- uvx bumpguard-mcpWhat BumpGuard does
BumpGuard is an MCP server for the moment you bump a package and wonder what will fall over. It reads the public API of the version you have and of the target version, diffs the two, then scans your code for the spots that the changes really touch. Each finding comes with a symbol, a line number, a severity and a hint at the replacement.
Everything is static analysis. Third-party code is never imported or run, and the target version is pulled down as a wheel and unpacked into a temp directory, so there are no import side effects and no hangs on heavy packages. Alongside the upgrade check there are tools to list a package's real symbols, test whether an import resolves, and match a snippet against the installed API — that last one catches calls to functions your version no longer has.
Run the server in the same environment as the project, otherwise it inspects the wrong set of packages. Python 3.10+ is required. The .NET provider needs dotnet on PATH; Java is read straight from .jar bytecode in pure Python. Because the analysis is static, an empty report means nothing was proven to break, not that nothing will — the server says so in its own output.
What it helps with
- find out which lines break when pydantic moves from 1 to 2
- catch a method call that the installed SDK version does not have
- filter a library's changelog down to the changes your code hits
- confirm that an agent-written snippet uses real function names
- read the actual signatures of a package's public API
Example prompts for the agent
- Before I upgrade pandas to 2.2, check whether my data pipeline breaks
- Check this snippet against the installed OpenAI SDK — do those methods exist
- List the real methods on
httpx.Client
How to install BumpGuard
Platform CLI
claude mcp add bumpguard -- uvx bumpguard-mcpuvx runs the command named after the package; if the README names another one, use uvx --from bumpguard-mcp <command>
Platform CLI
codex mcp add bumpguard -- uvx bumpguard-mcpuvx runs the command named after the package; if the README names another one, use uvx --from bumpguard-mcp <command>
Config file
{
"mcpServers": {
"bumpguard": {
"command": "uvx",
"args": [
"bumpguard-mcp"
]
}
}
}uvx runs the command named after the package; if the README names another one, use uvx --from bumpguard-mcp <command>
Config file
{
"servers": {
"bumpguard": {
"type": "stdio",
"command": "uvx",
"args": [
"bumpguard-mcp"
]
}
}
}uvx runs the command named after the package; if the README names another one, use uvx --from bumpguard-mcp <command>
Platform CLI
gemini mcp add bumpguard uvx bumpguard-mcpuvx runs the command named after the package; if the README names another one, use uvx --from bumpguard-mcp <command>
Step by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about BumpGuard
How do I install BumpGuard in Claude Code?
Run claude mcp add bumpguard -- uvx bumpguard-mcp. The server starts through uvx, so there is nothing to install separately.
What does BumpGuard do?
It compares the API of two package versions and reports which parts of your code the changes affect. It also checks imports and calls in written code against the installed version.
Which languages are supported?
Python, .NET and Java. The .NET provider needs dotnet on PATH; Java is parsed from bytecode without a JDK.
