# Microsoft NuGet

NuGet's MCP server gives your agent live package data from your feeds, plans upgrades and works through vulnerable dependencies.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed · ★ 1555
- Author: NuGet
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/NuGet/Home/tree/HEAD/mcp
- Updated: 2026-10-20
- HTML: https://affpapa.org/en/nevibecode/mcp/microsoft-nuget

## What it does

The server talks to your configured NuGet feeds and returns current package information to the agent. From there it plans upgrades using the project's package graph and target frameworks. For packages with known vulnerabilities it produces a conservative remediation plan that covers transitive dependencies too.

There is also a supply-chain check: Central Package Management, NuGet Audit, Package Source Mapping and the validity of `NuGet.Config` all get reviewed, with hardening steps suggested. Worth running if your packages rarely get touched.

It runs through the `dnx` command, so .NET 10 Preview 6 or later is required — without it the server will not start. Check your version with `dotnet --info`. Configuration goes into `mcp.json`; Visual Studio 2026 ships the server in-box and you enable it once from the GitHub Copilot chat tools menu. Pin a version like `NuGet.Mcp.Server@1.0.0` and you own the updates yourself as new releases land.

## Install

### Claude Code (native platform)

**Install**
- The MCP registry has no launch command for it: see the repository README

## When to use it
- check current versions of packages in your feeds
- plan package upgrades from the project graph
- triage vulnerabilities in transitive dependencies
- validate `NuGet.Config` in a repository
- see whether NuGet Audit and Package Source Mapping are on

## Example prompts
- Show me which packages in this project have updates
- Build a remediation plan for the vulnerable dependencies
- Review the NuGet supply-chain settings in this repo

## Similar
- [nuget-manager](https://affpapa.org/en/nevibecode/skills/nuget-manager.md) — skill · 14360 installs
- [convert-to-cpm](https://affpapa.org/en/nevibecode/skills/convert-to-cpm.md) — skill · 3400 installs
- [directory-build-organization](https://affpapa.org/en/nevibecode/skills/directory-build-organization.md) — skill · 3700 installs
- [dotnet-upgrade](https://affpapa.org/en/nevibecode/skills/dotnet-upgrade.md) — skill · 11475 installs
- [ci-cd](https://affpapa.org/en/nevibecode/skills/ci-cd.md) — skill · 2800 installs
- [outdated](https://affpapa.org/en/nevibecode/skills/outdated.md) — skill · 2800 installs

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md