supply-chain-security MCP servers

12 tagged supply-chain-security, measured the same way as everything else here.

vet-mcp

01

safedep/vet

MCP server Cursor

One of 2 in mcp.json

MCP server "vet-mcp" as configured in safedep/vet. Runs in Docker (ghcr.io/safedep/vet:latest).

not rated 1.1k +3 changed 1mo ago A tokens not measured original Apache-2.0

free-memory-report

02

qualixar/skillfortify

MCP server Claude CodeCodexCursor +2

MCP server "free-memory-report" as configured in qualixar/skillfortify. Runs json.tool with python. Needs 1 environment variable to run.

not rated 40 +2 22d ago A tokens not measured

bomly-cli

03

bomly-dev/bomly-cli

MCP server Claude CodeCodexCursor +2

Give your coding agent the dependency graph it is about to change: scan, diff, explain, audit. Runs locally from the bomly-mcp npm package.

not rated 14 today A tokens not measured original Apache-2.0

matrixscroll

04

SSX360/matrixscroll

MCP server Claude CodeCodexCursor +2

MCP server for signed machine-action records, offline tool-surface checks, with device-agnostic custody and CNSA 2.0 Category 5 crypto (ML-DSA-87, ML-KEM-1024). Runs locally from the matrixscroll Python package.

not rated 5 18d ago A tokens not measured original Apache-2.0

wormhole-x402

05

runningoffcode/agent-wormhole

MCP server Claude CodeCodexCursor +2

Check tokens, pages and x402 payments before your agent trusts them. Offline verdicts. Runs locally from the wormhole-x402 npm package. Needs 3 environment variables to run.

not rated 5 1mo ago A Socket: warn tokens not measured original Apache-2.0

sswp-mcp

06

VrtxOmega/sswp-mcp

MCP server Claude CodeCodexCursor +2

MCP server "sswp-mcp" as configured in VrtxOmega/sswp-mcp. Runs locally from the sswp-mcp npm package.

not rated 3 1mo ago A tokens not measured original MIT

zyrax-guard

07

tiagosilva07/zyrax-guard

MCP server Claude CodeCodexCursor +2

Audit AI agent configs for prompt injection & rogue MCP servers; vet packages. Runs locally from the zyrax-guard npm package.

not rated 2 2mo ago A tokens not measured original MIT

agent-runtime-proof

08

fantasyce/agent-runtime-proof

MCP server Claude CodeCodexCursor +2

MCP server "agent-runtime-proof" as configured in fantasyce/agent-runtime-proof. Launched with https://github.com/fantasyce/agent-runtime-proof/releases/download/v1.1.0/agent-.

not rated 1 1mo ago A tokens not measured original Apache-2.0

whats-inherited-mcp

09

stcmain/whats-inherited-mcp

MCP server Claude CodeCodexCursor +2

What a checkout tells your agent to do: instruction files, hooks, declared MCP servers. Runs locally from the whats-inherited-mcp npm package.

not rated 0 3d ago A tokens not measured original MIT

vdb

10

0pstech/vdb-mcp

MCP server Claude CodeCodexCursor +2

MCP server for VDB — AI-aware vulnerability database (packages, MCP servers, models). Check packages for CVEs and slopsquatting before installing. Runs locally from the vdb-mcp Python package. Needs 2 environment variables to run.

not rated 0 22d ago A tokens not measured