Developer · Remote MCP server
npm Supply Chain Audit
Check npm packages for typosquats, hallucinated names, install scripts and risky new releases.
What the MCP Registry states
The entry as published to the official MCP Registry (read 2026-10-04), latest version.
- Registry name
io.github.tylerscomic-lab/npm-supply-chain-audit-mcp- Version
- 1.1.0
- Status
- Active
- Category
- developer
- Transport
- Streamable HTTP
- Published
- 2026-10-01
- Updated
- 2026-10-01
- Publisher
- tylerscomic-lab (GitHub) · 25 servers with pages here
- Repository
- github.com/tylerscomic-lab/npm-supply-chain-audit-mcp
- Source
- Registry API entry
Remote endpoints
| Transport | URL | Headers declared |
|---|---|---|
| Streamable HTTP | https://npm-supply-chain-audit-mcp.mcpize.run/mcp | None |
How to connect npm Supply Chain Audit
npm Supply Chain Audit is a remote MCP server: there is nothing to install. Its endpoint is https://npm-supply-chain-audit-mcp.mcpize.run/mcp, served over Streamable HTTP. In an assistant that accepts remote MCP servers (often under a setting named connectors, integrations or tools), add a new server and give it this URL; in a client configured by file, add it as a remote (HTTP) server with the same URL.
No headers are declared in the registry entry. If the server needs you to sign in, a client that supports MCP authorization opens the service's own sign-in page when it first connects.
Derived from the registry entry, not tested here. What the server does, and on what terms, is set by its publisher; check its repository or website before giving it access to your accounts or files. How to add an MCP server to an assistant · Before you connect
More from tylerscomic-lab (GitHub)
| Server | Runs |
|---|---|
| LedgerIQ Depreciation CalculatorMACRS schedules, Section 179 and bonus depreciation with 2026 limits. | Remote · HTTP |
| LedgerIQ Entity Structure AnalyzerLLC vs S-corp vs C-corp federal tax comparison, S-corp savings and conversion steps. | Remote · HTTP |
| LedgerIQ Financial Ratio AnalyzerLiquidity, profitability and leverage ratios with plain-language readings. | Remote · HTTP |
| LedgerIQ Journal Entry AssistantPlain-English transactions to balanced journal entries, adjusting and closing entries. | Remote · HTTP |
| MCP Schema AuditAudits MCP tool definitions for patterns that make models call tools wrong or mis-fill args. | Remote · HTTP |
| Monte Carlo Backtest ValidatorBootstrap Monte Carlo backtest validation and prop-firm challenge pass-probability simulation. | Remote · HTTP |
| Pine Script Strategy AuditStatic analysis for Pine Script v6 strategies — catches backtest-vs-live divergence traps. | Remote · HTTP |
| Pine Script Strategy GeneratorAI-powered Pine Script v6 strategy generator built for prop-firm futures traders. | Remote · HTTP |
| Prop Firm Rules EngineInstant "can I take this trade?" check against prop firm drawdown/position/consistency rules. | Remote · HTTP |
| Regex Safety AuditDetects catastrophic-backtracking (ReDoS) regex risk via AST parsing, with JS-safe rewrites. | Remote · HTTP |
| Reseller True-Profit & Fee CalculatorTrue net profit and breakeven price for eBay, Etsy, Poshmark, Mercari, Depop, Whatnot, TikTok Shop. | Remote · HTTP |
| Secrets Leak AuditScan text and git diffs for committed credentials using real vendor key formats plus entropy. | Remote · HTTP |
More developer servers
| Server | Runs |
|---|---|
| npm Release Tracker — new Node.js packages & JavaScript dependency updates (npmwatch)Npm releases: Node package versions, daily. $0.01/query. Register in-session — free testnet funds. | Remote · HTTP |
| Npm SearchNpm search MCP — find packages, view details, compare, check downloads. | Local · stdio |
| Npm Search MCPSearch npm packages and inspect package metadata from the public registry. No key required. | Local · stdio |
| Npm Sentinel MCPAdvanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights. | Local · stdio |
| npm Trends APINpm package download trends and adoption growth over time. Free key at trendsapi.ai. | Remote · HTTP |
| npm Trends MCPNpm package trends and weekly downloads over time. Free key at trendsmcp.ai. | Remote · HTTP |
| Npm Trusted Publish LintFinds the credential in your release workflow that expires before your next release. | Local · stdio |
| Npms MCPKeyless MCP server for npms.io: npm package quality, popularity and maintenance scores plus search. | Local · stdio |