--- bezeichner: "io.github.hxckya/pkgtruth" art: "mcp_server" slug: "io-github-hxckya-pkgtruth" paketkoordinate: "npm:pkgtruth" status: "aktiv" homepage: "https://github.com/hxckya/pkgtruth" erhebungsstand: "2026-10-11T01:17:01.851Z" namensraum: "io.github.hxckya" registerseite: "https://tracevero.com/mcp/io-github-hxckya-pkgtruth" abgerufen_am: "2026-10-11" zugangsdaten_erforderlich: false ausfuehrungsort: "lokal" dateisystem_pfadargument: false quelloffen_einsehbar: true roh_beschreibung: "Catches hallucinated and slopsquatted npm and PyPI packages before an agent installs them." version: "0.2.2" roh_umgebungsvariablen: "PKGTRUTH_REGISTRY, PKGTRUTH_DOWNLOADS_API, PKGTRUTH_CACHE_DIR, PKGTRUTH_TIMEOUT_MS" roh_geheime_pflichtvariablen: "" roh_transportarten: "stdio" roh_pfadargumente: "" roh_repository_url: "https://github.com/hxckya/pkgtruth" roh_paketquellen: "npm" roh_geheime_pflichtkopfzeilen: "" roh_pfad_umgebungsvariablen: "" roh_remote_adressen: "" roh_remote_hosts: "" roh_statusmeldung: "" roh_veroeffentlicht_am: "2026-09-10" roh_aktualisiert_am: "2026-09-10" roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json" roh_bereitstellungsform: "paket" roh_repository_quelle: "github" roh_repository_unterordner: "" roh_paketbezeichner: "pkgtruth" roh_paketversionen: "0.2.2" roh_laufzeithinweise: "" roh_umgebungsformate: "number, string" roh_umgebungsbeschreibungen: "PKGTRUTH_CACHE_DIR=Where adoption figures are cached between runs. Defaults to ~/.cache/pkgtruth. · PKGTRUTH_DOWNLOADS_API=Alternate downloads API used for adoption figures. Defaults to https://api.npmjs.org. · PKGTRUTH_REGISTRY=Alternate npm registry to verify against. Defaults to https://registry.npmjs.org. · PKGTRUTH_TIMEOUT_MS=Per-request timeout in milliseconds. Defaults to 8000." roh_symbolformate: "" roh_verbindungswege: "{\"packages\":[{\"registryType\":\"npm\",\"identifier\":\"pkgtruth\",\"version\":\"0.2.2\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"PKGTRUTH_REGISTRY\",\"description\":\"Alternate npm registry to verify against. Defaults to https://registry.npmjs.org.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"PKGTRUTH_DOWNLOADS_API\",\"description\":\"Alternate downloads API used for adoption figures. Defaults to https://api.npmjs.org.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"PKGTRUTH_CACHE_DIR\",\"description\":\"Where adoption figures are cached between runs. Defaults to ~/.cache/pkgtruth.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"PKGTRUTH_TIMEOUT_MS\",\"description\":\"Per-request timeout in milliseconds. Defaults to 8000.\",\"format\":\"number\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":false}],\"remotes\":[]}" --- # io.github.hxckya/pkgtruth ## Measured values | Property | Value | Source | Collected on | Level of trust | Raw declaration | | --- | --- | --- | --- | --- | --- | | Required secrets declared | false | MCP-Register | 2026-09-01T01:17:01.342Z | abgeleitet | roh_geheime_pflichtvariablen: ; roh_geheime_pflichtkopfzeilen: | | Execution location | lokal | MCP-Register | 2026-09-01T01:17:01.342Z | abgeleitet | roh_transportarten: stdio | | Path argument present | false | MCP-Register | 2026-09-01T01:17:01.342Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: | | Repository URL listed | true | MCP-Register | 2026-09-01T01:17:01.342Z | abgeleitet | roh_repository_url: https://github.com/hxckya/pkgtruth | | Description (raw) | Catches hallucinated and slopsquatted npm and PyPI packages before an agent installs them. | MCP-Register | 2026-09-11T01:17:02.031Z | selbstauskunft | | | Declared version | 0.2.2 | MCP-Register | 2026-09-11T01:17:02.031Z | selbstauskunft | | | Environment variables (raw) | PKGTRUTH_REGISTRY, PKGTRUTH_DOWNLOADS_API, PKGTRUTH_CACHE_DIR, PKGTRUTH_TIMEOUT_MS | MCP-Register | 2026-09-01T01:17:01.342Z | selbstauskunft | | | Required secret variables (raw) | | MCP-Register | 2026-09-01T01:17:01.342Z | selbstauskunft | | | Transports (raw) | stdio | MCP-Register | 2026-09-01T01:17:01.342Z | selbstauskunft | | | Path arguments (raw) | | MCP-Register | 2026-09-01T01:17:01.342Z | selbstauskunft | | | Repository (raw) | https://github.com/hxckya/pkgtruth | MCP-Register | 2026-09-01T01:17:01.342Z | selbstauskunft | | | Package registries (raw) | npm | MCP-Register | 2026-09-01T01:17:01.342Z | selbstauskunft | | | Required secret headers (raw) | | MCP-Register | 2026-09-01T01:17:01.342Z | selbstauskunft | | | Path environment variables (raw) | | MCP-Register | 2026-09-01T01:17:01.342Z | selbstauskunft | | | Remote URLs (raw) | | MCP-Register | 2026-09-01T01:17:01.342Z | selbstauskunft | | | Remote hosts (raw) | | MCP-Register | 2026-09-01T01:17:01.342Z | selbstauskunft | | | Registry status message (raw) | | MCP-Register | 2026-09-01T01:17:01.342Z | selbstauskunft | | | First listed in the registry (raw) | 2026-09-10 | MCP-Register | 2026-09-11T01:17:02.031Z | selbstauskunft | | | Last changed in the registry (raw) | 2026-09-10 | MCP-Register | 2026-09-11T01:17:02.031Z | selbstauskunft | | | Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-09-01T01:17:01.342Z | selbstauskunft | | | Delivery form (raw) | paket | MCP-Register | 2026-09-01T01:17:01.342Z | selbstauskunft | | | Repository platform (raw) | github | MCP-Register | 2026-09-01T01:17:01.342Z | selbstauskunft | | | Repository subfolder (raw) | | MCP-Register | 2026-09-01T01:17:01.342Z | selbstauskunft | | | Package identifiers (raw) | pkgtruth | MCP-Register | 2026-09-01T01:17:01.342Z | selbstauskunft | | | Package versions (raw) | 0.2.2 | MCP-Register | 2026-09-11T01:17:02.031Z | selbstauskunft | | | Runtime hints (raw) | | MCP-Register | 2026-09-01T01:17:01.342Z | selbstauskunft | | | Environment variable formats (raw) | number, string | MCP-Register | 2026-09-01T01:17:01.342Z | selbstauskunft | | | Environment variable descriptions (raw) | PKGTRUTH_CACHE_DIR=Where adoption figures are cached between runs. Defaults to ~/.cache/pkgtruth. · PKGTRUTH_DOWNLOADS_API=Alternate downloads API used for adoption figures. Defaults to https://api.npmjs.org. · PKGTRUTH_REGISTRY=Alternate npm registry to verify against. Defaults to https://registry.npmjs.org. · PKGTRUTH_TIMEOUT_MS=Per-request timeout in milliseconds. Defaults to 8000. | MCP-Register | 2026-09-01T01:17:01.342Z | selbstauskunft | | | Icon formats (raw) | | MCP-Register | 2026-09-01T01:17:01.342Z | selbstauskunft | | | Connection paths (source structure) | {"packages":[{"registryType":"npm","identifier":"pkgtruth","version":"0.2.2","transport":"stdio","environment":[{"name":"PKGTRUTH_REGISTRY","description":"Alternate npm registry to verify against. Defaults to https://registry.npmjs.org.","format":"string","required":false,"secret":false},{"name":"PKGTRUTH_DOWNLOADS_API","description":"Alternate downloads API used for adoption figures. Defaults to https://api.npmjs.org.","format":"string","required":false,"secret":false},{"name":"PKGTRUTH_CACHE_DIR","description":"Where adoption figures are cached between runs. Defaults to ~/.cache/pkgtruth.","format":"string","required":false,"secret":false},{"name":"PKGTRUTH_TIMEOUT_MS","description":"Per-request timeout in milliseconds. Defaults to 8000.","format":"number","required":false,"secret":false}],"additional_arguments_declared":false}],"remotes":[]} | MCP-Register | 2026-09-11T01:17:02.031Z | selbstauskunft | | ## Links - Namespace: [[namensraum/io-github-hxckya|io.github.hxckya]] --- - Registry page: - Retrieved on: 2026-10-11