MCP.Market

Node Runtime MCP server

by mcp-protocol·io.github.mcp-protocol/node-runtime·v1.0.2·1 stars
No reviews yet

This package is intended for demonstration only. Maintained by JFrog Security.

B74/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B74/100

full report

Adoption
New

1 stars35 downloads/wk

Reviews

Write one

Nobody has reviewed Node Runtime yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Node Runtime tools (2)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • letter-count

    Count the number of letters (a-z, A-Z) in the given text

  • word-count

    Count the number of words in the given text

Public scan report

scanner v0.1.10 · 2026-09-28 · same rubric, same numbers if you re-run it

no findings
  • Code scan2 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 215 days ago4/15
  • Maintainer identityregistry namespace matches repository owner7/10
Overall 74/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Node Runtime compares

Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
74/100
higher than 39% of 915 Security servers
Tools
2
the typical Security server has 6
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
1
more than 60% of 587 Security servers
Downloads a week
35
more than 23% of 248 Security servers with a package

What its tools let an agent do: 2 read

Install Node Runtime in Claude Code, Cursor or VS Code

Runs npx -y @mcp-protocol/node-runtime on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add node-runtime -- npx -y @mcp-protocol/node-runtime
Add to Cursor

What the publisher says

From the Node Runtime repository's README, as published. We do not edit it. Read it on GitHub

@mcp-protocol/node-runtime (Simulation)

Note: This package is part of a security research demonstration by JFrog.

Overview

This repository contains a functional implementation of an MCP (Model Context Protocol) runtime used to simulate supply-chain security scenarios in AI-driven environments.

Important Information

This repository and the associated package are part of a security simulation and research project. It is not intended for production environments or general-purpose use.

Nothing above is checked by us. What we check is on the safety report.

Node Runtime: common questions

Is Node Runtime MCP server safe?
Mostly: it is graded B (74/100). Read the Node Runtime safety report
How do I install Node Runtime?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Node Runtime need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Node Runtime maintained?
The last commit was 252 days ago (2026-02-25). The latest release is v1.0.2.
What can I use instead of Node Runtime?
Servers from other publishers that do the same job: Mastyf AI MCP server, npm Registry MCP Server and Code Factory MCP server.
How does Node Runtime compare with other Security MCP servers?
safety score 74/100 (higher than 39% of 915 Security servers); tools 2 (the typical Security server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Node Runtime

Same job from other publishers: the closest match first, then the best rated.

  • Mastyf AI
    Runtime proxy for MCP security, cost governance & audit
    B
  • npm Registry MCP Server
    npm registry MCP server — package intelligence, security audits, dependency analysis
    B
  • Code Factory
    Read-only audit evidence for security, tests, native coverage, runtime failures and repair status.
    B
  • pkgxray
    Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.
    B
  • Bastion
    Reliability + security proxy for MCP: runtime tool-security and a compliance-mapped audit trail.
    A