- Conduid
- Marketplace
- #software-supply-chain
MCP servers tagged software-supply-chain
13 live MCP servers tagged "software-supply-chain", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with software-supply-chain.
Peerbridge MCP
Local-first, auditable multi-agent control room for coding, review, evidence, and private remote work.
OpenTrustBench
Trust & security scanner for AI agents and MCP servers — OWASP-mapped findings, Trust Cards (A–F grades), SARIF + CI gate. Free CLI, zero telemetry.
Tellur
Local-first AI code provenance: line-level attribution, PR risk reports, policy checks, and tamper-evident audit trails for AI-assisted software.
Matrixscroll
Open protocol and MCP server for signed machine-action records, offline verification, and SSX360 USB signer support.
Agent Engineering Toolkit
Proof-carrying workflows for coding agents: bind tests to exact code, detect stale evidence, review scope, and hand proof across agents.
Sovereign Security Protocol
Full SSP v13.4.0 source in Portuguese, with bilingual community summaries for application security, secure SDLC, AI agents, MCP, and evidence-based adoption.
Limitlesslibrary
Local, verified reuse for AI agents with fail-closed protection: exact components, source-free methods, receiver-owned verification, and adoption evidence.
Verahelm Decision Envelope
Offline verifier and GitHub Action for signed, revision-bound change gates; the private decision engine is not published.
Magus Mcpsentinel
Deterministic, non-executing evidence and change monitoring for public npm MCP servers. Reports what changed since the version you approved. It never claims a package is safe.
SprintLoop Assurance Kit
Independent release assurance for AI-built code. Model-neutral CLI, GitHub Actions, and read-only MCP bind evidence and finite human authority to an exact Git candidate.
Agent Sbom
Capability-aware SBOM and SARIF scanner for agent skills, MCP manifests, prompts, and scripts.
Shpbl
SHPBL — a governed system for harvesting, cataloguing, composing and verifying software capability. Public front door; the machine itself is private.
Upgrade Atelier
A keyless, explainable upgrade dossier for npm dependencies with live release signals, MCP tools, and replayable audit seals.