Loading…
package-lock.json for MCP trust: catch MCP rug-pulls, tool poisoning, and leaked secrets.
toolprint by JEStats is an MCP server entry in ChatHome Skills, sourced from Official MCP Registry and scored 78/100. As a Model Context Protocol server, it exposes tools that MCP-compatible LLM clients such as Claude, Cursor, and Copilot can call directly, extending an agent's reach beyond its built-in capabilities. ChatHome Skills discovered this entry through its daily ingest of official registries and GitHub discovery queries, and re-verifies repository facts, freshness signals, and install metadata on every run. The quality score weighs official-registry presence, a working install command, license clarity, GitHub star trajectory, and repository freshness — the full formula is on the Sources page. The install command above is ready to copy. Review the last-pushed date and repository status before adding toolprint by JEStats to a production agent workflow; the snapshot facts below are point-in-time values from the most recent ingest.
npx -y toolprint@0.4.1Review the upstream source before running this command.
{
"_meta": {
"io.modelcontextprotocol.registry/official": {
"status": "active",
"isLatest": true,
"updatedAt": "2026-10-15T17:55:12.565396Z",
"publishedAt": "2026-10-15T17:55:12.565396Z",
"statusChangedAt": "2026-10-15T17:55:12.565396Z"
}
},
"server": {
"name": "io.github.jestatsio/toolprint",
"title": "toolprint by JEStats",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"version": "0.4.1",
"packages": [
{
"version": "0.4.1",
"transport": {
"type": "stdio"
},
"identifier": "toolprint",
"runtimeHint": "npx",
"registryType": "npm",
"packageArguments": [
{
"type": "positional",
"value": "serve"
}
],
"environmentVariables": [
{
"name": "TOOLPRINT_WORKDIR",
"description": "Default project directory for relative paths and lockfile discovery when a scan does not name one."
},
{
"name": "TOOLPRINT_BEARER",
"isSecret": true,
"description": "Optional bearer token for authenticated remote MCP servers you ask toolprint to scan. Never written to the lockfile."
}
]
}
],
"repository": {
"url": "https://github.com/jestatsio/toolprint",
"source": "github"
},
"websiteUrl": "https://jestatsio.github.io/toolprint/",
"description": "package-lock.json for MCP trust: catch MCP rug-pulls, tool poisoning, and leaked secrets."
}
}