{"name":"net.pkgproof/pkgproof","slug":"pkgproof","title":"pkgproof","description":"Verify an npm or PyPI package before install: advisories, install scripts, typosquats, repository.","url":"https://mcp.market/server/pkgproof","rating":null,"grade":"B","score":82,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":27,"stars":0,"forks":0,"downloads_week":53,"last_push_at":"2026-09-14T13:15:17.000Z","license":"Apache-2.0"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/jahija-okan/pkgproof-mcp","website":"https://pkgproof.net","version":"0.2.1","remotes":[],"packages":[{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"@pkgproof/mcp","version":"0.2.1","transport":{"type":"stdio"},"environmentVariables":[{"description":"Base64 account key of a throwaway Algorand wallet holding USDC (ASA 31566704) on Algorand Mainnet. Not a 25-word mnemonic. Optional: the first verification each day is free without any key. This is the rail payments prefer.","isSecret":true,"name":"PKGPROOF_ALGORAND_PRIVATE_KEY"},{"description":"0x-prefixed private key of a throwaway EVM wallet holding USDC on Base. Optional, and only used when no Algorand key is configured. Needs no ETH: payment is an off-chain signature and the facilitator pays the gas.","isSecret":true,"name":"PKGPROOF_BASE_PRIVATE_KEY"}]}],"tools":[],"scan":null,"grade_history":[],"reviews":[]}