Provenance Monitor
Monitors the software supply chain provenance of local Model Context Protocol (MCP) server packages.
概要
Provenance Monitor is a web dashboard designed to provide visibility into the software supply chain security of your local Model Context Protocol (MCP) server packages. It helps ensure the integrity and trustworthiness of your MCP server dependencies by monitoring provenance data sourced from the MCP registry. The dashboard currently supports servers published on npm and PyPI, offering a convenient way to track provenance statements and attestations.
主な機能
- Monitors provenance of MCP server packages
- Data refreshed daily
- Web-based dashboard for easy access
- Supports npm and PyPI packages
- 2 GitHub stars
ユースケース
- Identifying MCP servers with missing provenance information
- Verifying the integrity of MCP server dependencies
- Improving the supply chain security of MCP-based applications
Sponsored