Best Composer MCP Servers
Composer is a dependency manager for PHP that allows you to declare the libraries your project depends on and manages them for you.
Why this server?
Enables Composer to install packages from private repositories over SSH by loading the correct SSH keys into the agent and diagnosing authentication failures.
AlicenseAqualityAmaintenanceEnables secure remote command execution and file operations over SSH/SFTP with automatic authentication resolution. Features built-in diagnostics that identify connection issues—such as stale host keys, unloaded agents, or permission errors—and provide specific commands to fix them.Last updated212554MITWhy this server?
Provides crowdsourced package intelligence, trends, and health data for PHP projects using the Composer ecosystem.
AlicenseBqualityDmaintenanceProvides crowdsourced package intelligence and security alerts for AI coding assistants by analyzing project dependencies and framework co-occurrence. It enables automated project scans, package alternative discovery, and data-driven recommendations across multiple programming ecosystems.Last updated1046MITWhy this server?
Analyzes composer.json and composer.lock files to extract project metadata and identify known vulnerabilities (CVEs) in project dependencies.
AlicenseAqualityDmaintenanceA security audit server for Laravel projects that performs static code analysis, dependency CVE checks, and configuration audits. It enables developers to detect vulnerabilities like SQL injection and XSS while providing active attack simulations directly within MCP-compatible IDEs.Last updated82AGPL 3.0Why this server?
Scans composer.json files to automatically detect and integrate PHP project stack details into the FAF context.
AlicenseAqualityAmaintenancePersistent project context for Google Gemini. 12 MCP tools for .faf Project DNA — auto-detect your stack, validate, score, and sync across CLAUDE.md, GEMINI.md, and AGENTS.md. Python/FastMCP. IANA-registered format (application/vnd.faf+yaml). 183 tests. One file, every AI platform.Last updated122MITWhy this server?
Allows running Composer commands like install and update within RollDev project environments to manage PHP dependencies.
AlicenseAqualityCmaintenanceAn MCP server for RollDev and Magento 2 development environments that enables LLMs to manage project environments, execute SQL queries, and run PHP or Magento CLI commands. It supports automated project initialization, Composer integration, and system service control directly through natural language.Last updated1033MITWhy this server?
Scans composer.lock files to detect known vulnerabilities in PHP dependencies and recommend fix versions.
AlicenseAqualityAmaintenanceAn MCP server that scans your lockfiles (npm, PyPI, Go, Rust, Ruby, PHP) for known vulnerabilities, enriches with EPSS exploit probability scores, and recommends fix versions. $14/mo — not per-seat.Last updated91MITWhy this server?
Queries Packagist for the latest version of PHP packages.
AlicenseAqualityCmaintenanceAn MCP server that queries 19 package registries (npm, PyPI, crates.io, etc.) to retrieve the latest version of packages and their metadata.Last updated211MITWhy this server?
Allows configuring Composer install to run during deployments.
AlicenseBqualityDmaintenanceEnables AI assistants to fully manage Laravel Forge servers, sites, databases, workers, daemons, SSL certificates, and deployments.Last updated39745MITWhy this server?
Allows spawning and interacting with Composer agents via persistent terminal sessions, enabling AI-driven orchestration of Composer's coding capabilities.
AlicenseAqualityAmaintenancePersistent tmux-backed MCP server that lets Claude Code control Codex CLI's interactive TUI, including slash commands and $imagegen. Run local shells, SSH, Docker, WSL, REPLs, and supported coding agents through durable PTY sessions.Last updated138422MIT