Thezenmonster/agentscore-mcp-server

What it does

Thezenmonster/agentscore-mcp-server is a security monitoring tool that acts as a trust layer for MCP (Model Context Protocol) servers. It continuously scans over 800 MCP packages on npm to detect security threats including installation scripts, command injection vulnerabilities, hardcoded secrets, and unauthorized capability drift. The tool evaluates publisher posture and trust indicators to prevent supply chain attacks.

How to set up

Install the MCP server from the npm registry. Configure it as an MCP server in your agent environment. Integrate the GitHub Action into your repository workflow by adding the policy gate configuration to your CI/CD pipeline. The action automatically runs on pull requests to enforce security policies before merging.

Key features

• Real-time monitoring of 800+ MCP packages on npm
• Detection of install scripts and command injection attempts
• Hardcoded secrets scanning
• Capability drift detection
• Publisher posture assessment
• GitHub Action integration for automated PR gates
• Cross-platform support (macOS, Windows, Linux)