{
  "markdown": "# TridentChain Security\n\n[![PyPI — tridentchain-security](https://img.shields.io/pypi/v/tridentchain-security?label=tridentchain-security&color=3b82f6)](https://pypi.org/project/tridentchain-security/)\n[![PyPI — tridentchain-mcp](https://img.shields.io/pypi/v/tridentchain-mcp?label=tridentchain-mcp&color=3b82f6)](https://pypi.org/project/tridentchain-mcp/)\n[![PyPI Downloads](https://img.shields.io/pypi/dm/tridentchain-mcp?label=downloads&color=34d399)](https://pypi.org/project/tridentchain-mcp/)\n[![MCP Registry](https://img.shields.io/badge/MCP%20Registry-active-34d399)](https://registry.modelcontextprotocol.io/v0.1/servers?search=tridentchain)\n[![Python](https://img.shields.io/badge/python-3.10%2B-3776ab?logo=python&logoColor=white)](https://www.python.org/downloads/)\n[![License: MIT](https://img.shields.io/badge/license-MIT-yellow.svg)](LICENSE)\n[![Works with Claude · Cursor · VS Code · Windsurf · Zed](https://img.shields.io/badge/Claude%20%C2%B7%20Cursor%20%C2%B7%20VS%20Code%20%C2%B7%20Windsurf%20%C2%B7%20Zed-MCP-7c3aed)](docs/AGENT_INTEGRATIONS.md)\n[![Docker (ghcr.io)](https://img.shields.io/badge/ghcr.io-tridentchain--mcp-2496ed?logo=docker&logoColor=white)](https://github.com/DevInder1/supply-chain-scanner-public/pkgs/container/tridentchain-mcp)\n\nLocal-first vulnerability scanner for project dependencies, developer tools, and IDE extensions.  \nUses multi-source intelligence (OSV, NVD, GHSA, Sonatype) with KEV/EPSS prioritization.\n\n**No API key required** for default usage.\n\nPublic repo: https://github.com/DevInder1/supply-chain-scanner-public\n\n---\n\n## Install (plug and play)\n\n```bash\npip3 install tridentchain-security\nnpm install -g @tridentchain/security-cli\ntridentchain-security --help\n```\n\n**Agents & MCP (Claude, Cursor, VS Code, Windsurf, Zed):**\n\nPick whichever install path fits:\n\n```bash\n# Option A — pip (needs Python 3.10+)\npip3 install -U \"tridentchain-security>=0.1.4\" \"tridentchain-mcp>=0.1.4\"\n\n# Option B — uvx (no manual Python install; uv handles it)\nuvx tridentchain-mcp\n\n# Option C — Docker (no Python needed, fully sandboxed)\ndocker pull ghcr.io/devinder1/tridentchain-mcp:latest\n# Then in your MCP config, replace `python3 -m tridentchain_mcp` with:\n#   command: docker\n#   args: [\"run\", \"--rm\", \"-i\", \"-v\", \"$PWD:/workspace\", \"ghcr.io/devinder1/tridentchain-mcp:latest\"]\n```\n\nWhat you can do: **[docs/CAPABILITIES.md](docs/CAPABILITIES.md)**  \nFull guide: **[docs/INSTALL_AND_USE.md](docs/INSTALL_AND_USE.md)**  \nCross-platform (macOS / Linux / Windows): **[docs/CROSS_PLATFORM.md](docs/CROSS_PLATFORM.md)**  \n(PyPI: [tridentchain-security](https://pypi.org/project/tridentchain-security/) · npm: [@tridentchain/security-cli](https://www.npmjs.com/package/@tridentchain/security-cli))\n\n```bash\ntridentchain-security --scan all --project-path . --output-dir scanner-output\n```\n\n---\n\n## Use in your own Python app\n\n```python\nfrom scanner import run_scan\n\nsummary = run_scan(\n    project_path=\".\",\n    scan=\"all\",\n    run_profile=\"full\",  # no API key required\n    output_dir=\"scanner-output\",\n)\nprint(summary[\"summary\"])\n```\n\n---\n\n## Scan profiles\n\n| Profile | Description |\n|---------|-------------|\n| `full` (default) | Project + system + extensions. OSV + NVD without keys. |\n| `quick` | Faster project-focused scan. |\n| `offline` | Local advisory DB only, no network. |\n| Power-user | Add `GITHUB_TOKEN`, `NVD_API_KEY`, optional `SONATYPE_TOKEN` for best coverage. |\n\n---\n\n## Desktop app (individual application)\n\nNo repo clone required if the pip package is installed:\n\n```bash\npip3 install tridentchain-security\ncd apps/desktop && npm install && npm run start\n```\n\nSee [apps/desktop/README.md](apps/desktop/README.md) and [docs/DISTRIBUTION_VERIFICATION.md](docs/DISTRIBUTION_VERIFICATION.md).\n\n## AI / automation (Claude, OpenAI, Cursor, VS Code, Windsurf, …)\n\n**One install, every agent:** `pip install \"tridentchain-security>=0.1.2\" tridentchain-mcp`\n\n| Guide | Description |\n|-------|-------------|\n| **[Agent integrations](docs/AGENT_INTEGRATIONS.md)** | Claude · OpenAI · Cursor · VS Code · Windsurf · Zed · MCP · CLI |\n| [Capabilities](docs/CAPABILITIES.md) | Everything you can do today |\n| [Architecture](docs/INTEGRATION_ARCHITECTURE.md) | MCP + unified tools design |\n\n```bash\n./scripts/setup-agent-mcp.sh cursor   # prints setup for your agent\n```\n\n**Phase 2 — Claude MCP:** `pip install tridentchain-mcp` · [Setup guide](docs/CLAUDE_MCP_SETUP.md) · [Plugin](plugins/tridentchain-security/)\n\n**Phase 3 — OpenAI + Cursor:** [examples/openai/](examples/openai/) · [Cursor setup](docs/CURSOR_SETUP.md) · `.cursor/mcp.json.example`\n\n**Phase 4 — VS Code (Anthropic MCP):** Open repo → MCP ready · [VS Code setup](docs/VSCODE_SETUP.md) · `./scripts/vscode-mcp-install-link.sh` · [extension](extensions/vscode-tridentchain/)\n\n**Phase 5 — Validate:** `tridentchain-security --validate` · MCP `validate_after_patch` · [CAPABILITIES.md](docs/CAPABILITIES.md)\n\nUnified tool layer: `from scanner.integrations import execute_tool, get_tool_definitions, to_openai_tools`\n\n---\n\n## Development\n\n```bash\ngit clone https://github.com/DevInder1/supply-chain-scanner-public.git\ncd supply-chain-scanner-public\npython3 -m pip install -e .\ntridentchain-security --help\npython3 -m unittest scanner.tests.test_matcher_ranges -v\n```\n\nInstall & use: `docs/INSTALL_AND_USE.md`  \nCross-platform: `docs/CROSS_PLATFORM.md`  \nCLI contract: `docs/cli-contract.md`  \nPublishing: `docs/PUBLISHING.md`\n\n---\n\n## Optional API keys (power users)\n\n| Variable | Purpose |\n|----------|---------|\n| `NVD_API_KEY` | Higher NVD rate limits |\n| `GITHUB_TOKEN` | GHSA advisories |\n| `SONATYPE_TOKEN` | Sonatype Guide advisories |\n\nSet in `.env` or environment variables.\n\n---\n\n## License\n\nMIT — see [LICENSE](LICENSE)\n",
  "bytes": 5743,
  "sha": "ae7cb38e56a426cc116e31f41770a54dc3c725e9546359e18e8b075c193064b9",
  "repo_slug": "devinder1/supply-chain-scanner-public",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_io_github_devinder1_tridentchain_securit_497312a9/readme"
}