Metadata-Version: 2.4
Name: hvtracker-mcp
Version: 0.1.0
Summary: MCP server for HVTracker trust checks.
Author: YugantM
License-Expression: MIT
Project-URL: Homepage, https://hvtracker.net
Project-URL: Repository, https://github.com/YugantM/hvtracker-mcp
Project-URL: Issues, https://github.com/YugantM/hvtracker-mcp/issues
Keywords: mcp,model-context-protocol,ai-agents,trust,supply-chain
Classifier: Development Status :: 3 - Alpha
Classifier: Intended Audience :: Developers
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.10
Classifier: Programming Language :: Python :: 3.11
Classifier: Programming Language :: Python :: 3.12
Classifier: Topic :: Security
Classifier: Topic :: Software Development :: Libraries :: Python Modules
Requires-Python: >=3.10
Description-Content-Type: text/markdown
License-File: LICENSE
Requires-Dist: mcp>=1.27.2
Requires-Dist: requests>=2.32.0
Provides-Extra: dev
Requires-Dist: build>=1.2.0; extra == "dev"
Requires-Dist: pytest>=9.0.0; extra == "dev"
Requires-Dist: ruff>=0.15.0; extra == "dev"
Requires-Dist: twine>=6.0.0; extra == "dev"
Dynamic: license-file

# HVTracker MCP

MCP server for checking supply-chain trust before connecting to AI agents,
frameworks, or MCP servers.

The hosted remote server is:

```json
{
  "mcpServers": {
    "hvtracker": {
      "url": "https://hvtracker.net/mcp"
    }
  }
}
```

This repository also provides a local stdio package for clients that prefer
package-based installation.

<!-- mcp-name: io.github.yugantm/hvtracker-mcp -->

## Tools

- `verify_mcp_server`: pre-connect trust verdict for an MCP server, package, GitHub repo, or agent name.
- `check_agent_trust`: compact trust profile for a tracked AI agent or framework.
- `search_agents`: search the HVTracker registry by name, repo, description, or category.

## Local Install

With npm:

```bash
npm install -g hvtracker-mcp
```

With PyPI:

```bash
python3 -m pip install hvtracker-mcp
```

Example MCP client config:

```json
{
  "mcpServers": {
    "hvtracker": {
      "command": "hvtracker-mcp"
    }
  }
}
```

## Development

```bash
python3 -m pip install -e ".[dev]"
python3 -m pytest
hvtracker-mcp
```

Use a different HVTracker base URL while testing:

```bash
HVTRACKER_BASE_URL=http://localhost:8080 hvtracker-mcp
```

## Registry Publishing

The official MCP Registry manifest is `server.json`.

```bash
mcp-publisher login github
mcp-publisher publish
```

In GitHub Actions, run the "Publish MCP Registry" workflow after the npm,
PyPI, and GHCR packages for the same version are live.

The server name is:

```text
io.github.yugantm/hvtracker-mcp
```

## Claude Desktop Extension

Tagged releases build an `.mcpb` bundle for Claude Desktop from `manifest.json`.
To build it locally:

```bash
npm ci --omit=dev
npx @anthropic-ai/mcpb@2.1.2 pack
```

## Privacy

HVTracker MCP sends the user-supplied search string or server identifier to
`https://hvtracker.net` to fetch public trust data. It does not require an API
key and does not write to user systems. See the HVTracker site for current data
and methodology, and see `PRIVACY.md` for the repository privacy note.
