1. Conduid
  2. Security
  3. DescriptorPin
MCP server · Security

DescriptorPin

by · github.com/propavingk/DescriptorPin

Defensive integrity monitor for MCP tool descriptors: pins canonical hashes and reports mutation, shadowing, poisoning, and stdio transport risk.

Unclaimed clidefensive-securitydescriptordevsecopsintegrityjsonmcpmcp-securitymodel-context-protocolpinningpythonsecuritysupply-chaintool-descriptortool-poisoning
InstallView source
39Low

Scored 21 days ago · breakdown

About DescriptorPin

DescriptorPin is an MCP server published by propavingk in the Security category: defensive integrity monitor for MCP tool descriptors: pins canonical hashes and reports mutation, shadowing, poisoning, and stdio transport risk.

The repository has 30 stars and 0 forks, with the last commit 27 days ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/propavingk/DescriptorPin

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about DescriptorPin

Powered by Claude · Grounded in docs

I know everything about DescriptorPin. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Releases

v1.0.1DescriptorPin v1.0.1 · 20 Sep 2026DescriptorPin v1.0.1 See CHANGELOG.md for the full entry.
v1.0.0DescriptorPin v1.0.0 · 20 Sep 2026DescriptorPin v1.0.0 See CHANGELOG.md for the full entry.
Questions

About DescriptorPin

How do I install DescriptorPin?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is DescriptorPin safe to use with an AI agent?

Its trust score is 39 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is DescriptorPin still maintained?

Yes — the latest release is v1.0.1 (20 Sep 2026), and the last commit was 27 days ago. The repository has 30 stars.