pkgproof

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-10-15T12:17:59.295797Z",
      "publishedAt": "2026-10-15T12:17:59.295797Z",
      "statusChangedAt": "2026-10-15T12:17:59.295797Z"
    }
  },
  "server": {
    "name": "net.pkgproof/pkgproof",
    "title": "pkgproof",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "version": "0.2.1",
    "packages": [
      {
        "version": "0.2.1",
        "transport": {
          "type": "stdio"
        },
        "identifier": "@pkgproof/mcp",
        "registryType": "npm",
        "registryBaseUrl": "https://registry.npmjs.org",
        "environmentVariables": [
          {
            "name": "PKGPROOF_ALGORAND_PRIVATE_KEY",
            "isSecret": true,
            "description": "Base64 account key of a throwaway Algorand wallet holding USDC (ASA 31566704) on Algorand Mainnet. Not a 25-word mnemonic. Optional: the first verification each day is free without any key. This is the rail payments prefer."
          },
          {
            "name": "PKGPROOF_BASE_PRIVATE_KEY",
            "isSecret": true,
            "description": "0x-prefixed private key of a throwaway EVM wallet holding USDC on Base. Optional, and only used when no Algorand key is configured. Needs no ETH: payment is an off-chain signature and the facilitator pays the gas."
          }
        ]
      }
    ],
    "repository": {
      "url": "https://github.com/jahija-okan/pkgproof-mcp",
      "source": "github"
    },
    "websiteUrl": "https://pkgproof.net",
    "description": "Verify an npm or PyPI package before install: advisories, install scripts, typosquats, repository."
  }
}