# Verdaccio

**Canonical:** https://apis.io/providers/verdaccio/  
**Website:** https://www.verdaccio.org/  
**APIs profiled:** 9

Verdaccio is an open-source, lightweight private npm proxy registry built in Node.js that enables organizations to host, cache, and manage packages privately. It implements the CommonJS Compliant Package Registry specification and provides a REST API for publishing, searching, and managing npm packages in self-hosted or cloud-deployed environments. Verdaccio supports JWT and Basic Auth token authentication, rate limiting, pluggable storage backends, and seamless proxying of upstream registries such as npmjs.org.

## Kin Score — 32.2 / 100 (thin)

Scored 2026-08-25 under rubric 0.14.0. Trend: flat (+0.0 from 32.2).

| Facet | Score |
|---|---|
| Discoverability | 64.8 |
| Contract Quality | 56.9 |
| Governance | 9.8 |
| Contract Governance | 9.8 |
| Operational Transparency | 5.3 |
| Developer Ergonomics | 19.0 |
| Commercial Clarity | 28.9 |
| Access Clarity | 28.9 |

## Agent readiness — 24.8 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | bearer |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | verified |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |
| Delegated Identity | no |
| Protected Resource Metadata | no |
| Dynamic Client Registration | no |
| Agentic Commerce | no |

## Access

Freemium · Self-serve signup — onboarding: self-serve, pricing: freemium, trial: no (confidence: high).

## APIs (9)

- **Verdaccio npm Registry API** — The Verdaccio npm Registry REST API implements the CommonJS Compliant Package Registry specification, providing endpoints to publish, retrieve, search, and delete npm packages. ...
- **Verdaccio dist-tags API** — Manage dist-tags for packages
- **Verdaccio packages API** — Retrieve package metadata and tarballs
- **Verdaccio profile API** — User profile management
- **Verdaccio publish API** — Publish, update, and unpublish packages
- **Verdaccio search API** — Search the registry
- **Verdaccio tokens API** — API token management
- **Verdaccio user API** — User authentication and management
- **Verdaccio utility API** — Utility endpoints

## Agentic access (1)

- **Verdaccio Agentic Access** — 24 operations · 11 acting · 1 human-in-the-loop

## Security (2)

- **Verdaccio Authentication** — http · 2 schemes
- **Verdaccio Domain Security** — TLSv1.3 · DMARC

## Plans (1)

- **Verdaccio Plans Pricing**

## Tags

npm, Registry, Package Manager, private-registry, Proxy, Node.js, Open-Source, Self-Hosted, YARN, pnpm, Docker, Kubernetes

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/verdaccio/). Scores are computed from the provider's own public artifacts under a published rubric.