MCP security guard + package manager. Block prompt injection, tool poisoning and rug-pulls in Model Context Protocol servers at runtime; trust-scored installs with Sigstore provenance for Claude Desktop, Claude Code, Cursor, VS Code, Windsurf and Gemini CLI. Local, deterministic, no LLM in the loop.
Latest release v0.50.0 · 5 Nov 2026
4 files for Claude Code, Codex and OpenCode: cli CLAUDE.md, mcpm-development, mcpm-release, cli AGENTS.md — 1,704 tokens loaded in every session.
CLAUDE.md A 210 tok AGENTS.md A 1,494 tok .agents/skills/mcpm-development/SKILL.md A 51 tok .agents/skills/mcpm-release/SKILL.md A 52 tok These files are getmcpm/cli's own configuration — they tell Claude Code, Codex and OpenCode how to work on this repository, so they are not mods to install elsewhere. Copy one as a starting point and replace the parts that are about this project.