Back to Browse

Toolprint MCP Server

Developer ToolsLow Risk10.0MCP RegistryLocal
Free

Server data from the Official MCP Registry

package-lock.json for MCP trust: catch MCP rug-pulls, tool poisoning, and leaked secrets.

About

package-lock.json for MCP trust: catch MCP rug-pulls, tool poisoning, and leaked secrets.

Security Report

10.0
Low Risk10.0Low Risk

Valid MCP server (1 strong, 1 medium validity signals). No known CVEs in dependencies. Package registry verified. Imported from the Official MCP Registry.

5 files analyzed · 1 issue found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

file_system

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Default project directory for relative paths and lockfile discovery when a scan does not name one.Optional

Environment variable: TOOLPRINT_WORKDIR

Optional bearer token for authenticated remote MCP servers you ask toolprint to scan. Never written to the lockfile.Required

Environment variable: TOOLPRINT_BEARER

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-jestatsio-toolprint": {
      "env": {
        "TOOLPRINT_BEARER": "your-toolprint-bearer-here",
        "TOOLPRINT_WORKDIR": "your-toolprint-workdir-here"
      },
      "args": [
        "-y",
        "toolprint"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!