HVTracker MCP
Pre-connect trust checks for AI agents and MCP servers using HVTracker's public trust registry.
Open source Repository Open in the app JSON README (API)
About
Pre-connect trust checks for AI agents and MCP servers using HVTracker's public trust registry.
Details
- Kind
- MCP servers
- Topic
- No topic detected
- Publisher
- yugantm
- Origin
- official
- Category
- ferramentas
- Transport
- http
- Version
- 0.3.0
- Stars
- 1
- Forks
- 1
- Last push
- 2026-08-09T14:56:06Z
- Repository state
- ativo
- Language
- Python
- License
- MIT
- Added
- 2026-08-29 03:02:21
- Updated
- 2026-08-29 03:02:21
- Origin id
io.github.YugantM/hvtracker-mcp
README
# HVTracker MCP
[](https://smithery.ai/servers/hvtracker/hvtracker-mcp)
[](https://www.npmjs.com/package/hvtracker-mcp) [](https://pypi.org/project/hvtracker-mcp/) [](LICENSE)
MCP server for checking supply-chain trust before connecting to AI agents,
frameworks, or MCP servers.
The hosted remote server is:
```json
{
"mcpServers": {
"hvtracker": {
"url": "https://hvtracker.net/mcp"
}
}
}
```
This repository also provides a local stdio package for clients that prefer
package-based installation.
<!-- mcp-name: io.github.YugantM/hvtracker-mcp -->
## Tools
- `verify_mcp_server`: pre-connect trust verdict for an MCP server, package, GitHub repo, or agent name.
- `check_agent_trust`: trust profile for a tracked AI agent or framework — incl. runtime capabilities (MCP status, providers, plugin surface, provenance drift) and the URL of its Ed25519-signed trust credential.
- `compare_agents`: two agents side by side with an evidence-based verdict and the published compare-page link.
- `search_agents`: search the HVTracker registry by name, repo, description, or category.
- `scan_stack`: bulk pre-connect trust check for a whole dependency set — paste a requirements.txt, package.json, MCP client config, or a plain list and get a trust verdict per item plus a stack summary.
- `list_categories`: list the HVTracker categories with agent counts, so you can then pull a category's leaderboard.
- `get_leaderboard`: top tracked AI agents and MCP servers ranked by HVTrust score, optionally filtered to one category.
- `get_agent_history`: 90-day trust-score, grade, and rank history for one tracked agent — is it improving or declining?
## Local Install
With npm:
```bash
npm install -g hvtracker-mcp
```
With PyPI:
```bash
python3 -m pip install hvtracker-mcp
```
Example MCP client config:
```json
{
"mcpServers": {
"hvtracker": {
"command": "hvtracker-mcp"
}
}
}
```
## Development
```bash
python3 -m pip install -e ".[dev]"
python3 -m pytest
hvtracker-mcp
```
Use a different HVTracker base URL while testing:
```bash
HVTRACKER_BASE_URL=http://localhost:8080 hvtracker-mcp
```
## Registry Publishing
The official MCP Registry manifest is `server.json`.
```bash
mcp-publisher login github
mcp-publisher publish
```
In GitHub Actions, run the "Publish MCP Registry" workflow after the npm,
PyPI, and GHCR packages for the same version are live.
The server name is:
```text
io.github.YugantM/hvtracker-mcp
```
## Claude Desktop Extension
Tagged releases build an `.mcpb` bundle for Claude Desktop from `manifest.json`.
To build it locally:
```bash
npm ci --omit=dev
npx @anthropic-ai/mcpb@2.1.2 pack
```
## Privacy
HVTracker MCP sends the user-supplied search string or server identifier to
`https://hvtracker.net` to fetch public trust data. It does not require an API
key and does not write to user systems. See the HVTracker site for current data
and methodology, and see `PRIVACY.md` for the repository privacy note.