What it does

Security trust layer that monitors MCP packages on npm for install scripts, command injection, hardcoded secrets, capability drift and publisher posture.

Local connectionPricing not confirmedv2.2.0

Connection manifest

Public connection metadata from the source. Follow the provider’s setup guide for authentication, permissions, and required variables.

{
  "name": "io.github.Thezenmonster/agentscore",
  "version": "2.2.0",
  "repository": {
    "url": "https://github.com/Thezenmonster/agentscore-mcp-server"
  },
  "remotes": [],
  "packages": [
    {
      "registryType": "npm",
      "identifier": "@agentscore-xyz/mcp-server",
      "version": "2.2.0",
      "transport": {
        "type": "stdio"
      },
      "environmentVariables": []
    }
  ]
}

Metadata reviewed for listing. Server code, permissions, and runtime behavior have not been security-audited. Directory access is free; individual providers may charge.