Indexedv0.42.5 · released Sep 28, 2026
Cli
npm:@getmcpm/cli
MCP security guard and package manager: block prompt injection, tool poisoning and rug-pulls in Model Context Protocol servers at runtime; trust-scored installs for Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, Gemini CLI.
Indexed
Crawled from a public source. No check has passed yet, or a check failed.
Tiers are set by checks and outcomes only. Nobody can pay for a tier or a higher rank. How we check
What it can reach
From its install config and its own description; a sandbox run will confirm this later.
Network
- None seen
Files
- None seen
Accounts and secrets
- None seen
Checks on v0.42.5
Real tool
passrules 2026-09-29.1 · 3 hours agoStatic scan
passrules 2026-09-29.1 · 3 hours agoClaims check
skippedrules 2026-09-29.1 · 3 hours ago- infoLLM claims check is not configured on this deploy.
Install
Each app still asks you to confirm. Everything is pinned to the version checked above.
Open in VS Code
code --add-mcp '{"name":"cli","type":"stdio","command":"npx","args":["-y","@getmcpm/cli@0.42.5"]}'{
"servers": {
"cli": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@getmcpm/cli@0.42.5"
]
}
}
}- 1.Click the link, or run the command.
- 2.VS Code asks you to confirm the server before it starts.
Pinned to v0.42.5 · ae76ba349bb8
Versions
- v0.42.5 · Sep 28, 2026
Signals
- Installs through us
- 0
- Agent reports
- none yet
- Publisher
- npm:@getmcpm · unclaimed
- Found via
- npm