# IndieStack — Dependency Intelligence

## MCP Setup
Add to `.cursor/mcp.json`:
```json
{
  "mcpServers": {
    "indiestack": {
      "command": "uvx",
      "args": ["--from", "indiestack", "indiestack-mcp"]
    }
  }
}
```

## CRITICAL: Dependency Verification
Before installing ANY new package via npm, pip, yarn, or pnpm:
1. Read the current manifest (package.json or requirements.txt)
2. Call `analyze_dependencies` with the full manifest content
3. If score < 70: STOP. Show the user which deps are risky. Propose alternatives.
   Do NOT proceed until the user explicitly approves.
4. After integrating a tool, call `report_outcome(slug, success=true/false)`

Before writing auth, payments, databases, email, or monitoring from scratch,
call `find_tools(query)` first. Use an existing tool instead of generating code.