1. Conduid
  2. Agents
  3. Supply Chain Risk MCP
MCP server · Agents

Supply Chain Risk MCP

by · github.com/bk-ml/supply-chain-risk-mcp

An MCP (Model Context Protocol) server that assesses open-source dependency risk — CVEs, license conflicts, maintenance health — for npm, PyPI, Cargo, Maven packages plus a 3-agent reviewer (Triage → Research → Synthesis) built on top of it that evaluates a PR's dependency changes end-to-end. Built on free, no-auth APIs: OSV.dev,deps.dev, github

Unclaimed dependency-managementgemini-apilicense-compliancellmmcpmodel-context-protocolmulti-agent-systemspythonsupply-chain-securityvulnerability-scanning
InstallView source
34Low

Scored 28 days ago · breakdown

About Supply Chain Risk MCP

Supply Chain Risk MCP is an MCP server published by bk-ml in the Agents category: an MCP (Model Context Protocol) server that assesses open-source dependency risk — CVEs, license conflicts, maintenance health — for npm, PyPI, Cargo, Maven packages plus a 3-agent reviewer (Triage → Research → Synthesis) built on top of it that evaluates a PR's dependency changes end-to-end. Built on free, no-auth APIs: OSV.dev,deps.dev, github.

The repository has 1 stars and 0 forks, with the last commit a month ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/bk-ml/supply-chain-risk-mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Supply Chain Risk MCP

Powered by Claude · Grounded in docs

I know everything about Supply Chain Risk MCP. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Releases

v2-multi-agent-systemv2-multi-agent-system
v1-mcp-serverv1-mcp-server
Questions

About Supply Chain Risk MCP

How do I install Supply Chain Risk MCP?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Supply Chain Risk MCP safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Supply Chain Risk MCP still maintained?

Yes — the last commit was a month ago. The repository has 1 stars and 0 forks.