Pkgproof MCP Server

Pkgproof is an MCP integration. Verify an npm package before install: advisories, install scripts, typosquats, declared repository.

Packages and local setup

The published npm package is @pkgproof/mcp, version 0.1.11. Its declared MCP transport is stdio.

The package declares PKGPROOF_ALGORAND_PRIVATE_KEY: Base64 account key of a throwaway Algorand wallet holding USDC (ASA 31566704) on Algorand Mainnet. Not a 25-word mnemonic. Optional: the first verification each day is free without any key. This is the rail payments prefer.; PKGPROOF_BASE_PRIVATE_KEY: 0x-prefixed private key of a throwaway EVM wallet holding USDC on Base. Optional, and only used when no Algorand key is configured. Needs no ETH: payment is an off-chain signature and the facilitator pays the gas..

Before connecting

Check the maintainer’s instructions for account access, authentication and the supported client configuration. Once connected, inspect the tools your client receives and try a small task that matches the server’s stated purpose. The registry description does not include a verified, complete tool list.

Project and source

View the publisher’s registry entry · Project repository · Project website. This profile uses version 0.1.11 from the registry. Registration identifies the publisher namespace; it does not establish that this is a first-party integration for every service it connects.

Browse related other integrations MCP servers for tools that cover the same kind of work.