Mcp Provenance Monitor
What is Mcp Provenance Monitor
MCP Provenance Monitor is a web dashboard designed to monitor the software supply chain provenance of local MCP server packages.
Use cases
Use cases include tracking the provenance of software packages in a development pipeline, ensuring compliance with supply chain security practices, and monitoring updates to MCP server packages.
How to use
To use MCP Provenance Monitor, access the dashboard via the provided link and follow the instructions for monitoring your MCP server packages. Ensure your servers are published on npm or PyPI for compatibility.
Key features
Key features include monitoring of software provenance, support for npm and PyPI packages, and a user-friendly web interface for visualizing data.
Where to use
MCP Provenance Monitor is applicable in software development environments, particularly for teams using MCP servers to manage package provenance and ensure supply chain security.
Clients Supporting MCP
The following are the main client software that supports the Model Context Protocol. Click the link to visit the official website for more information.
Overview
What is Mcp Provenance Monitor
MCP Provenance Monitor is a web dashboard designed to monitor the software supply chain provenance of local MCP server packages.
Use cases
Use cases include tracking the provenance of software packages in a development pipeline, ensuring compliance with supply chain security practices, and monitoring updates to MCP server packages.
How to use
To use MCP Provenance Monitor, access the dashboard via the provided link and follow the instructions for monitoring your MCP server packages. Ensure your servers are published on npm or PyPI for compatibility.
Key features
Key features include monitoring of software provenance, support for npm and PyPI packages, and a user-friendly web interface for visualizing data.
Where to use
MCP Provenance Monitor is applicable in software development environments, particularly for teams using MCP servers to manage package provenance and ensure supply chain security.
Clients Supporting MCP
The following are the main client software that supports the Model Context Protocol. Click the link to visit the official website for more information.
Content
MCP Provenance Monitor
👉 MCP Provenance Monitor Dashboard
A web dashboard for monitoring the software supply chain provenance of local MCP (Model Context Protocol) server packages.
FAQ
Why is MCP server xyz missing?
- Currently, only servers published on npm or PyPI are supported.
- Server data is sourced from the MCP registry at https://github.com/modelcontextprotocol/registry, which is still under development and not updated regularly. Manual additions are not supported yet.
How can I add provenance to my MCP server?
- For NPM packages, see Generating provenance statements.
- For PyPI packages, see Producing attestations.
How can I add provenance to dependencies?
- Help improve the ecosystem by contributing to dependency packages: ensure they are built in CI and publish provenance. You can also consider submitting a pull request to those projects.
I just released a new version with provenance, but it still says provenance is missing. Why?
- Data is refreshed daily. If you just published a new version, please allow up to one day for the update to appear.
Do MCP clients check provenance?
- Not yet. For updates, see this issue.
Development
pip install -r requirements.txt python -m collector.main --dev python -m http.server -d web
License
See the LICENSE file for details.
Dev Tools Supporting MCP
The following are the main code editors that support the Model Context Protocol. Click the link to visit the official website for more information.
