MCP server

Dependency Trust

ai.kaiv/dependency-trust

Checked 26 Oct 2026, 08:29 UTC · Connected to it and listed its tools

Trust-check any dependency for agents: OpenSSF Scorecard, licenses, CVEs, deps. 7 ecosystems.

At a glance

Type

MCP server

Publisher

kaiv.ai (verified by the MCP Registry)

Status

Working at last check

Tools

5

Token cost

About 1,275 tokens per request

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok

Last checked

26 Oct 2026, 08:29 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http dependency-trust https://api.kaiv.ai/api/bridge/mcp/dependency-trust-f1aaf06d

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.dependency-trust]
url = "https://api.kaiv.ai/api/bridge/mcp/dependency-trust-f1aaf06d"

Gemini CLI

{"mcpServers":{"dependency-trust":{"httpUrl":"https://api.kaiv.ai/api/bridge/mcp/dependency-trust-f1aaf06d"}}}

Cursor

{"mcpServers":{"dependency-trust":{"url":"https://api.kaiv.ai/api/bridge/mcp/dependency-trust-f1aaf06d"}}}

VS Code

{"servers":{"dependency-trust":{"type":"http","url":"https://api.kaiv.ai/api/bridge/mcp/dependency-trust-f1aaf06d"}}}

Antigravity

agy mcp add dependency-trust https://api.kaiv.ai/api/bridge/mcp/dependency-trust-f1aaf06d

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"dependency-trust","server_url":"https://api.kaiv.ai/api/bridge/mcp/dependency-trust-f1aaf06d","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"dependency-trust","server_url":"https://api.kaiv.ai/api/bridge/mcp/dependency-trust-f1aaf06d"}

Tools

• get_advisory ~216 tokens
  Get a security advisory (vulnerability) by its key. Returns a security advisory by key, for example a GHSA id taken from a version's advisoryKeys, including the title, CVE aliases, CVSS v3 score and vector, and a link to the full record on osv.dev. Use this only when you already have an advisory ID
• get_dependencies ~249 tokens
  Get the resolved dependency graph for one package version. Returns the full resolved dependency graph (direct and indirect) for a version. Each node has the dependency's exact version and its relation (SELF / DIRECT / INDIRECT). Use it to reason about transitive dependencies and supply chain.
• get_package ~226 tokens
  List every version of a package and whether each is deprecated. Returns all published versions of a package with publish date, the default-version flag, and deprecation status. Use it to find the latest version or check if a package is deprecated. Coding agents should call this before recommending
• get_package_version ~269 tokens
  Get license, security advisories, and source links for one package version. Returns detailed metadata for a single version: SPDX licenses, security advisoryKeys (known vulnerabilities), homepage/issue-tracker/source-repo links, registries, publish date, and deprecation status. Pass any advisoryKey
• get_project_health ~315 tokens
  Get a project's OpenSSF Scorecard security posture and maintenance signals. THE trust check. Returns supply-chain trust signals for a package's source repository: the OpenSSF Scorecard overall score (0-10) and per-check results (Maintained, Code-Review, Signed-Releases, Branch-Protection, Pinned-De

Browse

• GitHub tools
• Facebook tools
• Social media
• GitHub and code hosting
• Security scanning

Related MCP servers

• Signal Oracle
  Pay-per-call change-intelligence feeds for AI agents over x402 (deps, security, regs, tariffs)
• Package Health Check
  Check an npm or Python package, or a package.json, for vulnerabilities and upkeep.
• Toolcall
  30 pay-per-call APIs for AI agents: compliance, trade, safety, web, data. USDC on Base via x402.
• Sighttrue
  Measured readings on open-source dependencies: health, end-of-life, model prices, incidents.
• ScorpTech x402 API
  112 x402 pay-per-call tools: web data, security/OSINT, SEC and public data, Solana/EVM lookups
• Package Intel MCP
  Package intelligence for AI agents across npm, PyPI, crates.io and deps.dev. No API keys.
• LicenseGate
  Open-source licence risk checks for AI coding agents and dependency trees.
• Commit — Supply Chain Risk Scoring
  Supply chain risk scoring for npm, PyPI, Cargo, and Go. 9 tools. Behavioral signals.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/ai.kaiv/dependency-trust.svg)](https://aptlynx.net/servers/ai.kaiv/dependency-trust)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents