For AI coding agents

UpgradeLens

One deterministic, source-cited call answers: should this dependency move from version A to version B, and what must be handled? Security delta, runtime compatibility, dependency diff, EOL state and documented breaking changes — npm and PyPI only.

Anonymous free evaluation quota: one free evaluation unit per rolling 30-day network identity — no API key required. Subsequent analyses use machine-to-machine x402 USDC payment when enabled. Read-only: the service never executes commands, never clones repos, and never fetches caller-supplied URLs.

Install

GitHub dependency pull requests

Review a Dependabot, Renovate or manual npm/PyPI update before merge. Get one cited repository review per rolling 30 days through GitHub OIDC. The first-review workflow needs no wallet and authorizes zero spending.

Install the GitHub Action Verified v0.1.3 release

permissions:
  contents: read
  id-token: write
# After actions/checkout with fetch-depth: 0:
- uses: mattpicone/upgradelens-action@v0
  with:
    max-changes: "1"
    max-spend-usd: "0"

Cursor

Add to Cursor

{
  "mcpServers": {
    "upgradelens": { "url": "https://upgradelens.mattpicone.workers.dev/mcp" }
  }
}

Claude Code

claude mcp add --transport http upgradelens https://upgradelens.mattpicone.workers.dev/mcp

Codex CLI

# ~/.codex/config.toml
[mcp_servers.upgradelens]
url = "https://upgradelens.mattpicone.workers.dev/mcp"

Remote MCP

https://upgradelens.mattpicone.workers.dev/mcp
Start with review_dependency_upgrade for one cited decision and migration plan. Target unknown? Use find_safe_upgrade_target. Legacy check and plan tools remain available.

REST API

OpenAPI spec · llms.txt · pricing · health

Evidence, not vibes

Every claim cites deps.dev, OSV, npm, PyPI or endoflife.date with URL + timestamp. Returns unknown rather than guessing.

Or call it directly

curl -X POST https://upgradelens.mattpicone.workers.dev/v1/upgrade/review \
  -H 'content-type: application/json' \
  -d '{"ecosystem":"npm","package":"express","current_version":"4.19.2","target_version":"5.1.0","runtime":{"node":"20.11.0"}}'

Review dependency pull requests automatically

Install the UpgradeLens GitHub Action to review exact npm and PyPI updates from Dependabot or Renovate. It uses a repository trial through GitHub OIDC, sends package names and versions, and reports cited migration actions in the workflow summary.

Continue after the free evaluation

Additional analyses cost exactly $0.01 USDC on Base. The service returns an x402 payment challenge; paying requires an x402-capable buyer with a funded wallet. A standard MCP installation does not automatically pay. Public buyer examples show free evaluation and capped payment.