mcpm MCP Server: Install & Setup

Install mcpm in Claude Code

Claude Code

claude mcp add mcpm -- npx -y @getmcpm/cli

mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)

{
  "mcpServers": {
    "mcpm": {
      "command": "npx",
      "args": [
        "-y",
        "@getmcpm/cli"
      ]
    }
  }
}

MCP security guard + package manager: trust-scored installs, blocks prompt injection and rug-pulls.

Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.

Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.

Run: claude mcp add mcpm -- npx -y @getmcpm/cli

alisaitteke/npm-mcp

MCP server for npm package management, security analysis, and compatibility checking

cejor6/kalshi-mcp-server

MCP server for Kalshi prediction markets: native RSA-PSS auth, rate limiting, demo/prod safety.

Mickdownunder/SafeInstall

Local-first supply-chain security gate for npm/pnpm/bun: typosquat, release age, provenance checks

hivelearn/community-hub

Read and author HiveLearn courses, events, quizzes, certificates, resources, leaderboards, tracks.

KryptosAI/mcp-seatbelt

MCP runtime security proxy. Blocks dangerous AI agent tool calls with a policy engine.

sparkvibe-io/GuardianShield

AI security layer: code scanning, PII detection, prompt injection, secrets, CVEs