pkgproof MCP Server
by jahija-okannet.pkgproof/pkgproofv0.1.11
Verify an npm package before install: advisories, install scripts, typosquats, declared repository.
context tax
queued
security
queued
cold start
queued
freshness
Active1d ago
Install pkgproof MCP server
Install in Claude Code
claude mcp add pkgproof -e PKGPROOF_ALGORAND_PRIVATE_KEY='<pkgproof-algorand-private-key>' -e PKGPROOF_BASE_PRIVATE_KEY='<pkgproof-base-private-key>' -- npx -y @pkgproof/mcpInstall in Cursor
{
"mcpServers": {
"pkgproof": {
"command": "npx",
"args": [
"-y",
"@pkgproof/mcp"
],
"env": {
"PKGPROOF_ALGORAND_PRIVATE_KEY": "<pkgproof-algorand-private-key>",
"PKGPROOF_BASE_PRIVATE_KEY": "<pkgproof-base-private-key>"
}
}
}
}Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (project).
Install in Claude Desktop
{
"mcpServers": {
"pkgproof": {
"command": "npx",
"args": [
"-y",
"@pkgproof/mcp"
],
"env": {
"PKGPROOF_ALGORAND_PRIVATE_KEY": "<pkgproof-algorand-private-key>",
"PKGPROOF_BASE_PRIVATE_KEY": "<pkgproof-base-private-key>"
}
}
}
}Settings → Developer → Edit Config (claude_desktop_config.json), then restart.
Install in VS Code
{
"servers": {
"pkgproof": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@pkgproof/mcp"
],
"env": {
"PKGPROOF_ALGORAND_PRIVATE_KEY": "<pkgproof-algorand-private-key>",
"PKGPROOF_BASE_PRIVATE_KEY": "<pkgproof-base-private-key>"
}
}
}
}Add to .vscode/mcp.json in your workspace.
Install in Windsurf
{
"mcpServers": {
"pkgproof": {
"command": "npx",
"args": [
"-y",
"@pkgproof/mcp"
],
"env": {
"PKGPROOF_ALGORAND_PRIVATE_KEY": "<pkgproof-algorand-private-key>",
"PKGPROOF_BASE_PRIVATE_KEY": "<pkgproof-base-private-key>"
}
}
}
}Add to ~/.codeium/windsurf/mcp_config.json.
Configuration
| Variable | Required | Secret | Description |
|---|---|---|---|
| PKGPROOF_ALGORAND_PRIVATE_KEY | — | yes | Base64 account key of a throwaway Algorand wallet holding USDC (ASA 31566704) on Algorand Mainnet. Not a 25-word mnemonic. Optional: the first verification each day is free without any key. This is the rail payments prefer. |
| PKGPROOF_BASE_PRIVATE_KEY | — | yes | 0x-prefixed private key of a throwaway EVM wallet holding USDC on Base. Optional, and only used when no Algorand key is configured. Needs no ETH: payment is an off-chain signature and the facilitator pays the gas. |
Freshness
Active — last maintenance signal 1d ago. The newest of the signals below sets the band.
Last commit (default branch)
2026-10-08 · 1d ago · GitHub
Latest release
2026-10-08 · 1d ago · GitHub · v0.1.11
Package published
no data · npm/PyPI
Registry entry updated
2026-10-08 · 1d ago · official registry · v0.1.11
FAQ
›How do I install the pkgproof MCP server in Claude Code?
Run: claude mcp add pkgproof -e PKGPROOF_ALGORAND_PRIVATE_KEY='<pkgproof-algorand-private-key>' -e PKGPROOF_BASE_PRIVATE_KEY='<pkgproof-base-private-key>' -- npx -y @pkgproof/mcp. For Cursor, VS Code, Claude Desktop and Windsurf, use the install tabs above.
›Does pkgproof require an API key?
Yes. It expects PKGPROOF_ALGORAND_PRIVATE_KEY, PKGPROOF_BASE_PRIVATE_KEY, of which 2 are secrets.
›Can I use pkgproof as a remote (hosted) MCP server?
No hosted endpoint is published; it runs locally over stdio.
›Is pkgproof in the official MCP registry?
Yes, as net.pkgproof/pkgproof.