Local + RemoteFree server, account needed

HVTracker MCP server

YugantM/hvtracker-mcp

Pre-connect supply-chain trust checks for AI agents, frameworks and MCP servers: evidence-based HVTrust scores and verdicts from public signals (package provenance, OSSF Scorecard, signed commits, advisories), plus scan_stack to check a whole requirements.txt, package.json or MCP client config at once.

1 GitHub stars1 forks312 npm downloads / month

Install HVTracker in Claude Code

Remote URL

Claude Code
claude mcp add --transport http hvtracker https://hvtracker.net/mcp
mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)
{
  "mcpServers": {
    "hvtracker": {
      "url": "https://hvtracker.net/mcp"
    }
  }
}

npm

Claude Code
claude mcp add hvtracker -- npx -y hvtracker-mcp
mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)
{
  "mcpServers": {
    "hvtracker": {
      "command": "npx",
      "args": [
        "-y",
        "hvtracker-mcp"
      ]
    }
  }
}

PyPI (uv)

Claude Code
claude mcp add hvtracker -- uvx hvtracker-mcp
mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)
{
  "mcpServers": {
    "hvtracker": {
      "command": "uvx",
      "args": [
        "hvtracker-mcp"
      ]
    }
  }
}

Docker

Claude Code
claude mcp add hvtracker -- docker run -i --rm ghcr.io/yugantm/hvtracker-mcp:v0.4.0
mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)
{
  "mcpServers": {
    "hvtracker": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/yugantm/hvtracker-mcp:v0.4.0"
      ]
    }
  }
}

Frequently asked questions

What does the HVTracker MCP server do?

Pre-connect supply-chain trust checks for AI agents, frameworks and MCP servers: evidence-based HVTrust scores and verdicts from public signals (package provenance, OSSF Scorecard, signed commits, advisories), plus scan_stack to check a whole requirements.txt, package.json or MCP client config at once.

Is the HVTracker MCP server free?

The server is free, but you will likely need an account. The server itself is free, but it connects to a service that needs an account or API key, which may have paid tiers. Check the provider for current pricing.

Does HVTracker run locally or remotely?

Local + Remote. Can run locally or be used as a hosted remote server.

How do I add HVTracker to Claude Code?

Run: claude mcp add --transport http hvtracker https://hvtracker.net/mcp

More security & identity MCP servers

View all