1. Conduid
  2. Security
  3. Provenance Monitor
MCP server · Security

Provenance Monitor

by · github.com/letmaik/mcp-provenance-monitor

🔎 Monitoring supply chain provenance of local MCP servers

Unclaimed last commit a year ago mcp-serversupply-chain-security
InstallView source
20Low

Scored 14 hours ago · breakdown

About Provenance Monitor

Provenance Monitor is an MCP server published by letmaik in the Security category: 🔎 Monitoring supply chain provenance of local MCP servers.

The repository has 4 stars and 0 forks, with the last commit a year ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

From source
git clone https://github.com/letmaik/mcp-provenance-monitor

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Provenance Monitor

Powered by Claude

Ask about Provenance Monitor — answers draw on its README.

Security checks

6 checks have not been run yet.

Questions

About Provenance Monitor

How do I install Provenance Monitor?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Provenance Monitor safe to use with an AI agent?

Its trust score is 20 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Provenance Monitor still maintained?

The last commit was a year ago. That's long enough that you should check whether the maintainer is responding to issues before depending on it.