How do I install Slipmark?

Slipmark is a local plugin. Install it using npm package: slipmark and add the generated configuration snippet to your AI app's MCP config file. Then restart your AI app.

Is Slipmark safe to use?

Slipmark scored 6.1/10 (moderate risk) in MCP Marketplace's automated security scan. It has 2 high or critical findings to review. It's listed, but review the security report on this page before installing.

What AI apps work with Slipmark?

Slipmark uses the Model Context Protocol (MCP) and works with any MCP-compatible AI app, including Claude, ChatGPT / Codex, Gemini, Copilot, Cursor, and more.

Back to Browse

Slipmark MCP Server

by Founder Ship It

Developer ToolsModerate6.1MCP RegistryLocal

Free

Server data from the Official MCP Registry

Record AI agent verdicts bound to file hashes; refuse ones whose files or instructions changed.

About

Record AI agent verdicts bound to file hashes; refuse ones whose files or instructions changed.

Security Report

6.1

Moderate6.1Moderate Risk

Slipmark is an open-source CLI and MCP server that records agent verdicts bound to file SHA-256 hashes and verifies them in CI, with no network exfiltration evident in the visible code. The MCP tools are deliberately narrow: agents cannot record human verdicts, run commands, or sign, and writes are exclusive and symlink-aware. Remaining concerns are minor: the visible code is truncated, the package depends on sigstore and esbuild, and the attest/verify paths run git and read the filesystem as expected for a developer tool. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

5 files analyzed · 8 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

process_spawn

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-founder-ship-it-slipmark": {
      "args": [
        "-y",
        "slipmark"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!

4.8

Local

MCP Marketplace

Free

by mcp-marketplace · Developer Tools

Search and install MCP servers from inside your AI client.

Slipmark MCP Server

About

Security Report

Findings (8)Action required

Permissions Required

How to Install

Reviews

No reviews yet

More Developer Tools MCP Servers

Rea

Paperclip

Fetch

Git

Toleno

MCP Marketplace