YugantM/hvtracker-mcp

MCP server for checking supply-chain trust before connecting to AI agents,
frameworks, or MCP servers.
The hosted remote server is:
This repository also provides a local stdio package for clients that prefer
package-based installation.
Tools
- verify_mcp_server: pre-connect trust verdict for an MCP server, package, GitHub repo, or agent name.
- check_agent_trust: trust profile for a tracked AI agent or framework — incl. runtime capabilities (MCP status, providers, plugin surface, provenance drift) and the URL of its Ed25519-signed trust credential.
- compare_agents: two agents side by side with an evidence-based verdict and the published compare-page link.
- search_agents: search the HVTracker registry by name, repo, description, or category.
- scan_stack: bulk pre-connect trust check for a whole dependency set — paste a requirements.txt, package.json, MCP client config, or a plain list and get a trust verdict per item plus a stack summary.
- list_categories: list the HVTracker categories with agent counts, so you can then pull a category's leaderboard.
- get_leaderboard: top tracked AI agents and MCP servers ranked by HVTrust score, optionally filtered to one category.
- get_agent_history: 90-day trust-score, grade, and rank history for one tracked agent — is it improving or declining?
Check your AI dependencies in CI
HVTrust Gate runs the same trust checks in
GitHub Actions. With no configuration it reads your requirements.txt, pyproject.toml,
package.json and MCP client configs, and comments on pull requests that change them with
the HVTrust grade of each AI agent and MCP server you depend on.
Local Install
With npm:
With PyPI:
Example MCP client config:
Development
Use a different HVTracker base URL while testing:
Registry Publishing
The official MCP Registry manifest is server.json.
In GitHub Actions, run the "Publish MCP Registry" workflow after the npm,
PyPI, and GHCR packages for the same version are live.
The server name is:
Claude Desktop Extension
Tagged releases build an .mcpb bundle for Claude Desktop from manifest.json.