MCP server

Supply Chain Guard

io.github.homeofe/supply-chain-guard

Checked 26 Oct 2026, 08:31 UTC · Still published on its registry; checked against OSV.dev; never run by us

Supply-chain malware scanner and MCP server: vet packages in 15 ecosystems before install, offline.

Source

At a glance

Type

MCP server

Publisher

Not verified

Status

Runs on your computer

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code

Last checked

26 Oct 2026, 08:31 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. It then runs the package on your computer with your permissions. For other apps, copy the setup below.

Claude Code

claude mcp add supply-chain-guard -- npx -y supply-chain-guard@6.6.0

Claude Desktop

{"mcpServers":{"supply-chain-guard":{"command":"npx","args":["-y","supply-chain-guard@6.6.0"]}}}

Codex (config.toml)

[mcp_servers.supply-chain-guard]
command = "npx"
args = ["-y","supply-chain-guard@6.6.0"]

Gemini CLI

{"mcpServers":{"supply-chain-guard":{"command":"npx","args":["-y","supply-chain-guard@6.6.0"]}}}

Cursor

{"mcpServers":{"supply-chain-guard":{"command":"npx","args":["-y","supply-chain-guard@6.6.0"]}}}

VS Code

{"servers":{"supply-chain-guard":{"type":"stdio","command":"npx","args":["-y","supply-chain-guard@6.6.0"]}}}

Runs on your computer with your permissions: check the package and its source before installing.

Browse

• GitHub tools
• GitHub and code hosting
• Security scanning

Related MCP servers

• VerifyMCP
  Independent trust scores, tool surfaces and change history for MCP servers.
• Dominionobservatory Observatory
  Runtime behavioral trust scoring for MCP servers. Check reliability before calling unknown tools.
• FabTally Guard
  Verify before you act: deps-check, x402-preflight, json-repair & url-read for agents.
• vrsai
  Machine-native capabilities with explicit contracts and machine-readable commerce.
• Vibes-Coded Agent Security and Commerce Tools
  Agent supply-chain security, scanner consensus, x402 reliability, and commerce MCP tools.
• Annalist
  Signed data for agents: agentic-commerce census, dependency digest, x402/MCP checks, Hyperliquid
• Osv Advisory
  Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.
• Commit — Supply Chain Risk Scoring
  Supply chain risk scoring for npm, PyPI, Cargo, and Go. 9 tools. Behavioral signals.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.github.homeofe/supply-chain-guard.svg)](https://aptlynx.net/servers/io.github.homeofe/supply-chain-guard)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents