# StackRadar features

See what you run and prove you fixed it. Full page: https://stackradar.com/features/

## Know what you run
One live inventory across every project: what is installed, and where it runs.

## Why is this even in my app?
Trace any package back to the code that pulls it in. Diamond dependencies stop being a mystery.

## Debt, measured in days (preview)
Each dependency shows how far behind it runs, and for how long. A brand-new release cools down before it counts as debt. Release catalogs: npm and Packagist (Composer). You authorize it once from your organization’s integration settings, and it reads only what you allow.

## Advisories that know your org
An advisory arrives already matched to your projects, with the version that fixes each one. The rest never enters your queue. Advisories carry an exploit-likelihood tag beside the CVSS score, and closed exposures keep a recorded reason.

## Prove you fix on time (remediation SLAs)
Set fix deadlines once. Every exposure gets a clock, and the trend keeps the numbers an audit asks for: severity-weighted exposure over time, met-target rate, average time to close. These are your own remediation deadlines, tracked by the product.

## Hear about it once
A new advisory pings the channel you chose, with the projects it hits. Everything else waits for the digest. Channels: Slack, Discord, and email.

## In your CI, both directions
The GitHub Action (stackradar/stackradar-action@v1) pushes lockfiles in with a short-lived OIDC token, no secrets to store. PR checks gate the other way: a bad version gets a red check before it merges.

## Your agent asks. The radar answers.
Connect a coding agent over MCP and it stops guessing what your org runs: what is exposed, through which dependency paths, and the version that fixes it. Endpoint stackradar.com/mcp/v1, OAuth, read-only tools (list_organizations, list_projects, list_vulnerability_exposures, get_vulnerability_remediation_context). In preview: ask via https://stackradar.com/contact/

Start: https://stackradar.com/signup (30-day free trial) · Pricing: https://stackradar.com/pricing.md · Blog: https://stackradar.com/blog.md