--- bezeichner: "net.pkgproof/pkgproof" art: "mcp_server" slug: "net-pkgproof-pkgproof" paketkoordinate: "npm:@pkgproof/mcp" status: "aktiv" homepage: "https://pkgproof.net" erhebungsstand: "2026-10-10T01:17:01.464Z" namensraum: "net.pkgproof" registerseite: "https://tracevero.com/mcp/net-pkgproof-pkgproof" abgerufen_am: "2026-10-10" zugangsdaten_erforderlich: false ausfuehrungsort: "lokal" dateisystem_pfadargument: false quelloffen_einsehbar: true einsatzgebiet: "versionsverwaltung" roh_beschreibung: "Verify an npm package before install: advisories, install scripts, typosquats, declared repository." version: "0.1.11" roh_umgebungsvariablen: "PKGPROOF_ALGORAND_PRIVATE_KEY, PKGPROOF_BASE_PRIVATE_KEY" roh_geheime_pflichtvariablen: "" roh_transportarten: "stdio" roh_pfadargumente: "" roh_repository_url: "https://github.com/jahija-okan/pkgproof-mcp" roh_paketquellen: "npm" roh_geheime_pflichtkopfzeilen: "" roh_pfad_umgebungsvariablen: "" roh_remote_adressen: "" roh_remote_hosts: "" roh_statusmeldung: "" roh_veroeffentlicht_am: "2026-10-08" roh_aktualisiert_am: "2026-10-08" roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json" roh_bereitstellungsform: "paket" roh_repository_quelle: "github" roh_repository_unterordner: "" roh_paketbezeichner: "@pkgproof/mcp" roh_paketversionen: "0.1.11" roh_laufzeithinweise: "" roh_umgebungsformate: "" roh_umgebungsbeschreibungen: "PKGPROOF_ALGORAND_PRIVATE_KEY=Base64 account key of a throwaway Algorand wallet holding USDC (ASA 31566704) on Algorand Mainnet. Not a 25-word mnemonic. Optional: the first verification each day is free without any key. This is the rail payments prefer. · PKGPROOF_BASE_PRIVATE_KEY=0x-prefixed private key of a throwaway EVM wallet holding USDC on Base. Optional, and only used when no Algorand key is configured. Needs no ETH: payment is an off-chain signature and the facilitator pays the gas." roh_symbolformate: "" roh_verbindungswege: "{\"packages\":[{\"registryType\":\"npm\",\"identifier\":\"@pkgproof/mcp\",\"version\":\"0.1.11\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"PKGPROOF_ALGORAND_PRIVATE_KEY\",\"description\":\"Base64 account key of a throwaway Algorand wallet holding USDC (ASA 31566704) on Algorand Mainnet. Not a 25-word mnemonic. Optional: the first verification each day is free without any key. This is the rail payments prefer.\",\"required\":false,\"secret\":true},{\"name\":\"PKGPROOF_BASE_PRIVATE_KEY\",\"description\":\"0x-prefixed private key of a throwaway EVM wallet holding USDC on Base. Optional, and only used when no Algorand key is configured. Needs no ETH: payment is an off-chain signature and the facilitator pays the gas.\",\"required\":false,\"secret\":true}],\"additional_arguments_declared\":false}],\"remotes\":[]}" --- # pkgproof ## Measured values | Property | Value | Source | Collected on | Level of trust | Raw declaration | | --- | --- | --- | --- | --- | --- | | Required secrets declared | false | MCP-Register | 2026-09-09T01:17:01.503Z | abgeleitet | roh_geheime_pflichtvariablen: ; roh_geheime_pflichtkopfzeilen: | | Execution location | lokal | MCP-Register | 2026-09-09T01:17:01.503Z | abgeleitet | roh_transportarten: stdio | | Path argument present | false | MCP-Register | 2026-09-09T01:17:01.503Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: | | Repository URL listed | true | MCP-Register | 2026-09-09T01:17:01.503Z | abgeleitet | roh_repository_url: https://github.com/jahija-okan/pkgproof-mcp | | Field of use, derived from the vendor description | versionsverwaltung | MCP-Register | 2026-10-09T01:17:01.645Z | abgeleitet | roh_beschreibung: Verify an npm package before install: advisories, install scripts, typosquats, declared repository. | | Description (raw) | Verify an npm package before install: advisories, install scripts, typosquats, declared repository. | MCP-Register | 2026-10-09T01:17:01.645Z | selbstauskunft | | | Declared version | 0.1.11 | MCP-Register | 2026-10-09T01:17:01.645Z | selbstauskunft | | | Environment variables (raw) | PKGPROOF_ALGORAND_PRIVATE_KEY, PKGPROOF_BASE_PRIVATE_KEY | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft | | | Required secret variables (raw) | | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft | | | Transports (raw) | stdio | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft | | | Path arguments (raw) | | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft | | | Repository (raw) | https://github.com/jahija-okan/pkgproof-mcp | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft | | | Package registries (raw) | npm | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft | | | Required secret headers (raw) | | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft | | | Path environment variables (raw) | | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft | | | Remote URLs (raw) | | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft | | | Remote hosts (raw) | | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft | | | Registry status message (raw) | | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft | | | First listed in the registry (raw) | 2026-10-08 | MCP-Register | 2026-10-09T01:17:01.645Z | selbstauskunft | | | Last changed in the registry (raw) | 2026-10-08 | MCP-Register | 2026-10-09T01:17:01.645Z | selbstauskunft | | | Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft | | | Delivery form (raw) | paket | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft | | | Repository platform (raw) | github | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft | | | Repository subfolder (raw) | | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft | | | Package identifiers (raw) | @pkgproof/mcp | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft | | | Package versions (raw) | 0.1.11 | MCP-Register | 2026-10-09T01:17:01.645Z | selbstauskunft | | | Runtime hints (raw) | | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft | | | Environment variable formats (raw) | | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft | | | Environment variable descriptions (raw) | PKGPROOF_ALGORAND_PRIVATE_KEY=Base64 account key of a throwaway Algorand wallet holding USDC (ASA 31566704) on Algorand Mainnet. Not a 25-word mnemonic. Optional: the first verification each day is free without any key. This is the rail payments prefer. · PKGPROOF_BASE_PRIVATE_KEY=0x-prefixed private key of a throwaway EVM wallet holding USDC on Base. Optional, and only used when no Algorand key is configured. Needs no ETH: payment is an off-chain signature and the facilitator pays the gas. | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft | | | Icon formats (raw) | | MCP-Register | 2026-09-09T01:17:01.503Z | selbstauskunft | | | Connection paths (source structure) | {"packages":[{"registryType":"npm","identifier":"@pkgproof/mcp","version":"0.1.11","transport":"stdio","environment":[{"name":"PKGPROOF_ALGORAND_PRIVATE_KEY","description":"Base64 account key of a throwaway Algorand wallet holding USDC (ASA 31566704) on Algorand Mainnet. Not a 25-word mnemonic. Optional: the first verification each day is free without any key. This is the rail payments prefer.","required":false,"secret":true},{"name":"PKGPROOF_BASE_PRIVATE_KEY","description":"0x-prefixed private key of a throwaway EVM wallet holding USDC on Base. Optional, and only used when no Algorand key is configured. Needs no ETH: payment is an off-chain signature and the facilitator pays the gas.","required":false,"secret":true}],"additional_arguments_declared":false}],"remotes":[]} | MCP-Register | 2026-10-09T01:17:01.645Z | selbstauskunft | | ## Links - Namespace: [[namensraum/net-pkgproof|net.pkgproof]] --- - Registry page: - Retrieved on: 2026-10-10