pkg-oraclePOST
Checks whether an npm, PyPI, or crates.io package is safe to install: confirms it exists, flags malicious or typosquatted/slopsquatted names, checks known CVEs (OSV.dev), and pulls its OpenSSF Scorecard. Returns an ALLOW/WARN/BLOCK verdict before your agent installs it.
Api EndpointSecurityHealthy · 178 ms0.003 USDC0.003 USDC · eip155:8453 · USDC0.003 USDC · solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp · USDC
https://mcp-snowy-dew-9447.fly.dev/verify