mcp-framework

Independent MCP server safety profile · methodology

Safe to install · safety score 91/100
61,570npm downloads/wk
3mosince last publish
v0.2.22latest version
provenance

Safety signals

Install script (code on npm i)no
License— none
Direct dependencies12
Last audited2026-07-09

Flags

lowНе указана лицензия.
Verify mcp-framework live right now — free: GET /mcp/verify?package=mcp-framework. See the whole ecosystem in the State of MCP Security report, or browse all audited servers.

Поддерживается, без опасных install-скриптов — можно ставить. Data from PulseFeed's independent MCP audit (last crawl 2026-07-09). An install script is not automatically malicious — native builds use them — but each is an unreviewed code-execution vector worth checking. All audited MCP servers →