What it does

Pre-connect supply-chain trust checks for AI agents, frameworks and MCP servers: evidence-based HVTrust scores and verdicts from public signals (package provenance, OSSF Scorecard, signed commits, advisories), plus scan_stack to check a whole requirements.txt, package.json or MCP client config at once.

Both connectionPricing not confirmedv0.4.0

Connection manifest

Public connection metadata from the source. Follow the provider’s setup guide for authentication, permissions, and required variables.

{
  "name": "io.github.YugantM/hvtracker-mcp",
  "version": "0.4.0",
  "repository": {
    "url": "https://github.com/YugantM/hvtracker-mcp"
  },
  "remotes": [
    {
      "type": "streamable-http",
      "url": "https://hvtracker.net/mcp"
    }
  ],
  "packages": [
    {
      "registryType": "npm",
      "identifier": "hvtracker-mcp",
      "version": "0.4.0",
      "transport": {
        "type": "stdio"
      },
      "environmentVariables": []
    },
    {
      "registryType": "pypi",
      "identifier": "hvtracker-mcp",
      "version": "0.4.0",
      "transport": {
        "type": "stdio"
      },
      "environmentVariables": []
    },
    {
      "registryType": "oci",
      "identifier": "ghcr.io/yugantm/hvtracker-mcp:v0.4.0",
      "version": "",
      "transport": {
        "type": "stdio"
      },
      "environmentVariables": []
    }
  ]
}

Metadata reviewed for listing. Server code, permissions, and runtime behavior have not been security-audited. Directory access is free; individual providers may charge.