Commit — Supply Chain Risk Scoring MCP Server

Environment

This server does not declare environment variables.

Tools show up when the registry metadata or the repository README lists them. GitHub enrichment fills this in when a token is configured.

About

FAQ

What is Commit — Supply Chain Risk Scoring?

Supply chain risk scoring for npm, PyPI, Cargo, and Go. 9 tools. Behavioral signals.

How do I install Commit — Supply Chain Risk Scoring?

Pick a client above and copy the generated config. Cursor and VS Code also have a deep link when the server can run locally or remotely.

Is Commit — Supply Chain Risk Scoring official?

No. Registry-listed is not the same as vendor-official. Read the methodology for the difference.

How is the trust score calculated?

This listing scores 43 (Fair). The formula is published on the methodology page.

Reviews

0 published · no average

Sign in to review this server.