1. Conduid
  2. Social
  3. Chainwatch
MCP server · Social

Chainwatch

by · github.com/zafarfaran/chainwatch

Open-source, local-first npm supply chain risk analyzer. Catches malicious packages before you install them — with provenance verification, compound risk scoring, and AI-native integration via MCP.

Unclaimed social
InstallView source
34Low

Scored a month ago · breakdown

About Chainwatch

Chainwatch is an MCP server published by zafarfaran in the Social category: open-source, local-first npm supply chain risk analyzer. Catches malicious packages before you install them — with provenance verification, compound risk scoring, and AI-native integration via MCP.

The repository has 2 stars and 0 forks.

Install

From source
git clone https://github.com/zafarfaran/chainwatch

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Chainwatch

Powered by Claude · Grounded in docs

I know everything about Chainwatch. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Chainwatch

How do I install Chainwatch?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Chainwatch safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Chainwatch still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.