MCP.Market

ProvenPin MCP server

online · 100% uptime
by provenpin·io.github.provenpin/provenpin·v0.1.0·1 stars
No reviews yet

Tested, version-pinned code recipes for AI coding agents, each with its last-passed receipt.

B77/100grade B
Write a reviewRun it
What users say
No reviews yet
Be the first
Safety scan
B77/100

full report

Adoption
Growing

1 stars

Reviews

Write one

Nobody has reviewed ProvenPin yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

ProvenPin tools (3)

write = sends, deletes, buys or posts
  • get_recipeFree

    Get a full recipe by id (ids come from search_recipes): every source and test file, the exact pinned dependency versions, the setup and test commands, and its test receipt (when it last passed, test counts, runtime and runner). Use the pinned versions together; they are the versions the tests passed with. Adapt names and config to the user's project, and keep the included tests to check your integration.

  • list_stacksFree

    List the libraries and frameworks that currently have passing, version-pinned recipes, with recipe counts. Call this to check whether ProvenPin covers a library before searching, or after a search returns nothing, and use the names as the stack filter in search_recipes.

  • search_recipesFree

    Find a tested, version-pinned code recipe for wiring libraries together. Call this BEFORE writing glue code that combines 2+ libraries (auth + framework, ORM + database, payments webhooks, queues, validation, request mocking, logging), and when you hit version conflicts, peer-dependency errors, or integration errors between libraries. Example queries: 'express stripe webhook', 'fastapi sqlmodel crud', 'hono jwt'. Only recipes whose latest test run passed are returned. Each result lists its exact pinned versions and a test receipt (receipt.last_passed_at). If nothing matches, write the code yourself; try list_stacks to see what is covered.

Public scan report

scanner v0.1.10 · 2026-10-15 · same rubric, same numbers if you re-run it

no findings
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 6318ms12/20
  • Tool poisoning3 tool descriptions checked15/15
  • Auth qualityopen endpoint, read-only tools10/15
  • Maintenancelast push 0 days ago15/15
  • Maintainer identityregistry namespace matches repository owner6/10
Overall 77/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How ProvenPin compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
77/100
higher than 50% of 48,255 servers
Tools
3
the typical server has 7
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Uptime
100%
of our recent checks; the typical remote server answers 100%
Response time
329 ms
faster than 44% of 30,031 servers
GitHub stars
1
more than 65% of 28,688 servers

What its tools let an agent do: 3 read

Install ProvenPin in Claude Code, Cursor or VS Code

claude mcp add --transport http provenpin https://mcp.provenpin.com/mcp
Add to Cursor

What the publisher says

From the ProvenPin repository's README, as published. We do not edit it. Read it on GitHub

ProvenPin

Tested, version-pinned, multi-library code recipes for AI coding agents, served over MCP.

Every recipe pins exact versions, runs its own tests in a clean environment, and carries a receipt with the time it last passed. Recipes are re-tested automatically when any of their libraries ships a new release. The MCP server only serves recipes that are currently passing.

Install

ProvenPin is a hosted MCP server. No API key, no signup.

Endpoint: https://mcp.provenpin.com/mcp

Claude Code

claude mcp add --transport http provenpin https://mcp.provenpin.com/mcp

Cursor (~/.cursor/mcp.json)

{ "mcpServers": { "provenpin": { "url": "https://mcp.provenpin.com/mcp" } } }

VS Code (.vscode/mcp.json)

{ "servers": { "provenpin": { "type": "http", "url": "https://mcp.provenpin.com/mcp" } } }

Windsurf (~/.codeium/windsurf/mcp_config.json)

{ "mcpServers": { "provenpin": { "serverUrl": "https://mcp.provenpin.com/mcp" } } }

Cline (MCP settings)

{ "mcpServers": { "provenpin": { "type": "streamableHttp", "url": "https://mcp.provenpin.com/mcp" } } }

Then ask your agent something like "find a tested recipe for a Next.js Stripe webhook".

MCP tools

recipes/   one folder per recipe (see SPEC.md)
runner/    validate, run tests in isolation, write receipts, release check, build index
receipts/  real test receipts (JSON)
index/     built index.json served by the MCP server
server/    MCP server (TypeScript, Cloudflare Workers, local dev mode)
.github/   CI: matrix per recipe, scheduled + on demand, release-triggered re-tests

Run locally (Node 22+, Python 3.13 and uv for Python recipes)

npm install
npm run validate                 # check manifests and pins
npm run test:recipes             # run every recipe, write receipts
node runner/run.mjs hono-zod-validator   # run one
npm run affected                 # recipes with newer upstream releases
npm run build:index              # build index/index.json
npm test                         # runner unit tests

cd server && npm install
npm test                         # MCP server unit tests
npm run dev                      # http://localhost:8787/mcp

Connect a client to the local server, for example in Claude Code:

claude mcp add --transport http provenpin http://localhost:8787/mcp

Optional header for the future Pro tier: x-provenpin-key: (keys come from the PROVENPINAPIKEYS secret).

Deploy your own

  1. Push this repo to a GitHub account for the brand.
  2. In Cloudflare: create an API token with "Edit Cloudflare Workers", add CLOUDFLAREAPITOKEN and CLOUDFLAREACCOUNTID as repo secrets, set repo variable DEPLOY_ENABLED=true.
  3. cd server && npx wrangler deploy (or let CI do it), then route mcp. to the worker.

License

MIT. See LICENSE.

Nothing above is checked by us. What we check is on the safety report.

ProvenPin: common questions

Is ProvenPin MCP server safe?
Mostly: it is graded B (77/100). Read the ProvenPin safety report
How do I install ProvenPin?
It runs remotely at mcp.provenpin.com. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does ProvenPin need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is ProvenPin maintained?
The last commit was 20 days ago (2026-10-15). The latest release is v0.1.0.
Is ProvenPin up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
How does ProvenPin compare with other MCP servers?
safety score 77/100 (higher than 50% of 48,255 servers); tools 3 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.