safeinstall
About
Local-first supply-chain security gate for npm/pnpm/bun: typosquat, release age, provenance checks
Use this server
Add it to your MCP client. The catalogue lists this config verbatim from its source — it does not run, download, or vouch for the server. Review the command before you run it.
Transportstdio (runs a local command)
Claude Code
claude mcp add safeinstall -- npx safeinstall-cli
Cursor
If the button doesn't open Cursor, use the JSON below — Cursor accepts the same mcpServers config.
VS Code
code --add-mcp '{"name":"safeinstall","command":"npx","args":["safeinstall-cli"]}'
JSON
{
"mcpServers": {
"safeinstall": {
"command": "npx",
"args": [
"safeinstall-cli"
]
}
}
}