---
title: "Npm integration for LuumenAI"
url: "https://www.luumen.ai/integrations/npm/"
entity: SoftwareIntegration
category: "Source control & CI/CD"
audience: "SRE, DevOps, platform engineering, IT operations"
---

# Npm integration for LuumenAI

Check npm package metadata, advisories, and download trends, then revoke a stale token.

## What LuumenAI can do with Npm

LuumenAI connects to Npm with an API token and exposes 12 tools (11 read-only · 1 destructive). Reads answer immediately; writes are shown as a plan and require approval by default, configurable per tool by an administrator.

## Key facts

- Authentication: API token
- Tools available: 12 tools (11 read-only · 1 destructive)
- Plan: available on all plans
- Category: Source control & CI/CD

## About Npm with LuumenAI

Connect npm and your agent can answer dependency questions from the registry itself. Look up package metadata and version history, bulk-query security advisories across a dependency list, and compare download counts over a date range. Token cleanup runs as a previewed, approved step, and the whole session is audited.

## Example tools

Read-only (11 in total):

- `NPM_GET_ALL_PACKAGES_DOWNLOAD_POINT` — Get total npm registry download statistics for all packages for a specified time period.
- `NPM_GET_DOWNLOAD_COUNTS_POINT` — Get npm package download statistics for a specified time period.
- `NPM_GET_DOWNLOAD_COUNTS_RANGE_PACKAGE` — Get download counts for an npm package over a specified date range.
- `NPM_GET_DOWNLOAD_RANGE_ALL` — Get daily download counts for all npm packages over a specified period.
- `NPM_GET_REGISTRY_CHANGES` — Get a stream of registry changes for replication purposes.
- `NPM_GET_REGISTRY_META` — Retrieves npm registry metadata via meta endpoints.
- `NPM_GET_VERSION_DOWNLOADS` — Get download counts for specific versions of a package over the last 7 days.
- `NPM_QUERY_BULK_SECURITY_ADVISORIES` — Bulk query security advisories for multiple npm packages.

Write and destructive (1 in total, approval required by default):

- `NPM_DELETE_USER_TOKEN_LEGACY` — Delete a user authentication token using the legacy endpoint.

## Frequently asked questions

### How does LuumenAI connect to Npm?

Authorize once with API token. Luumen lists the scopes each action needs before you approve the connection, and credentials never appear in the chat.

### Can LuumenAI change things in Npm on its own?

Read actions answer immediately. Anything that writes is shown as a plan and requires approval by default, including the 1 action classified as destructive. Administrators configure that per tool.

### Is there an audit trail?

Every call to Npm — read or write, approved or declined — is recorded with the actor, the input, and the result.

Full page: https://www.luumen.ai/integrations/npm/