Commit MCP Server: Install & Setup

Install Commit in Claude Code

Remote URL

Claude Code

claude mcp add --transport http commit-supply-chain-risk-scoring https://poc-backend.amdal-dev.workers.dev/mcp

mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)

{
  "mcpServers": {
    "commit-supply-chain-risk-scoring": {
      "url": "https://poc-backend.amdal-dev.workers.dev/mcp"
    }
  }
}

npm

Claude Code

claude mcp add commit-supply-chain-risk-scoring -- npx -y proof-of-commitment

mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)

{
  "mcpServers": {
    "commit-supply-chain-risk-scoring": {
      "command": "npx",
      "args": [
        "-y",
        "proof-of-commitment"
      ]
    }
  }
}

Frequently asked questions

What does the Commit MCP server do?

Supply chain risk scoring for npm, PyPI, Cargo and Go packages from behavioral signals: publisher depth, release consistency and maintenance patterns.

Is the Commit MCP server free?

The server is free, but you will likely need an account. The server itself is free, but it connects to a service that needs an account or API key, which may have paid tiers. Check the provider for current pricing.

Does Commit run locally or remotely?

Local + Remote. Can run locally or be used as a hosted remote server.

How do I add Commit to Claude Code?

Run: claude mcp add --transport http commit-supply-chain-risk-scoring https://poc-backend.amdal-dev.workers.dev/mcp

More security & identity MCP servers

View all

Code Sentinel

3172

salrad22/code-sentinel

Code quality analysis MCP server - detects security issues, deceptive patterns, and placeholders

LocalFree

Ciphertrust Manager

sanyambassi/ciphertrust-manager-mcp-server

Thales CipherTrust Manager integration for key management, cryptographic operations and compliance monitoring.

LocalAccount neededPython

Corvus

Albasha0x0/Corvus

Reverse engineering and security analysis of .NET and native binaries: decompile, compare, patch.

LocalFree

PerspectiveGraph

luiacuaniello/perspectivegraph

Attack-path engine for cloud and Kubernetes: list routes from internet exposure to sensitive assets, explain each hop, find choke points and simulate fixes.

LocalFreeGo

Draugr

draugr-dev/draugr

Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.

LocalFree

Webcheck

3220

yifanyifan897645/webcheck-mcp

Website health analysis: SEO, accessibility, performance, security, and broken links

LocalFree