Is io.github.DevInder1/tridentchain-security safe to use?

io.github.DevInder1/tridentchain-security has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.DevInder1/tridentchain-security?

io.github.DevInder1/tridentchain-security supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.DevInder1/tridentchain-security do?

io.github.DevInder1/tridentchain-security provides 2 tools: Development, License. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.DevInder1/tridentchain-security?

io.github.DevInder1/tridentchain-security is compatible with claude-desktop, cursor, claude-code. It uses http transport.

Is io.github.DevInder1/tridentchain-security actively maintained?

io.github.DevInder1/tridentchain-security is actively maintained — last commit was 22 days ago.

io.github.DevInder1/tridentchain-security

@tridentchain/security-cli

Local supply-chain CVE scanner via OSV/NVD. Scans deps and IDE extensions. No upload.

5/wk 2 tools GitHub npm PyPI

No known CVEs

No license

Actively maintained

Last commit 22d ago

Works with most clients

Transport: http

2 tools · ~43 tok

Grade A · 0.0% of 200K ctx

Edit this pageView history

Other

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktophttp · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-devinder1-tridentchain-security": {
      "args": [
        "-y",
        "@tridentchain/security-cli"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-devinder1-tridentchain-security)](https://mcppedia.org/s/io-github-devinder1-tridentchain-security)

Read me

What io.github.DevInder1/tridentchain-security does

Local-first vulnerability scanner for project dependencies, developer tools, and IDE extensions. Uses multi-source intelligence (OSV, NVD, GHSA, Sonatype) with KEV/EPSS prioritization.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@tridentchain/security-cli' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

85/100across 5 weighted dimensions

How we score →

0255075100

−15

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @tridentchain/security-cli against OSV.dev.

Inventory

Tools (2)

Click any tool to inspect its schema.

~43 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.DevInder1/tridentchain-security safe to use?: io.github.DevInder1/tridentchain-security has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.DevInder1/tridentchain-security?: io.github.DevInder1/tridentchain-security supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.DevInder1/tridentchain-security do?: io.github.DevInder1/tridentchain-security provides 2 tools: Development, License. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.DevInder1/tridentchain-security?: io.github.DevInder1/tridentchain-security is compatible with claude-desktop, cursor, claude-code. It uses http transport.
Is io.github.DevInder1/tridentchain-security actively maintained?: io.github.DevInder1/tridentchain-security is actively maintained — last commit was 22 days ago.

Similar servers

Others in other

View all →

Pi Lean Ctx95

Pi Coding Agent extension (CLI-first) — routes bash/read/grep/find/ls through lean-ctx CLI for strong token savings. Optional MCP bridge can register advanced tools.

3.0k 6

Headroom95

Compress tool outputs, logs, files, and RAG chunks before they reach the LLM. 60-95% fewer tokens, same answers. Library, proxy, MCP server.

55.0k 3

Sigmap94

97% token reduction for AI coding sessions — zero deps, 21 languages, MCP server

531 6

io.github.asklokesh/loki-mode94

Autonomous spec-to-product coding-agent CLI with an MCP server exposing 34 tools over stdio.

997 8

MCP Security Weekly

Get CVE alerts and security updates for io.github.DevInder1/tridentchain-security and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Other

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktophttp · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-devinder1-tridentchain-security": {
      "args": [
        "-y",
        "@tridentchain/security-cli"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-devinder1-tridentchain-security)](https://mcppedia.org/s/io-github-devinder1-tridentchain-security)

Read me

What io.github.DevInder1/tridentchain-security does

Local-first vulnerability scanner for project dependencies, developer tools, and IDE extensions. Uses multi-source intelligence (OSV, NVD, GHSA, Sonatype) with KEV/EPSS prioritization.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@tridentchain/security-cli' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

TridentChain Security

Local-first vulnerability scanner for project dependencies, developer tools, and IDE extensions.
Uses multi-source intelligence (OSV, NVD, GHSA, Sonatype) with KEV/EPSS prioritization.

No API key required for default usage.

Public repo: https://github.com/DevInder1/supply-chain-scanner-public

Install (plug and play)

pip3 install tridentchain-security
npm install -g @tridentchain/security-cli
tridentchain-security --help

Agents & MCP (Claude, Cursor, VS Code):

pip3 install "tridentchain-security>=0.1.1" tridentchain-mcp

What you can do: docs/CAPABILITIES.md
Full guide: docs/INSTALL_AND_USE.md
Cross-platform (macOS / Linux / Windows): docs/CROSS_PLATFORM.md
(PyPI: tridentchain-security · npm: @tridentchain/security-cli)

tridentchain-security --scan all --project-path . --output-dir scanner-output

Use in your own Python app

from scanner import run_scan

summary = run_scan(
    project_path=".",
    scan="all",
    run_profile="full",  # no API key required
    output_dir="scanner-output",
)
print(summary["summary"])

Scan profiles

Profile	Description
`full` (default)	Project + system + extensions. OSV + NVD without keys.
`quick`	Faster project-focused scan.
`offline`	Local advisory DB only, no network.
Power-user	Add `GITHUB_TOKEN`, `NVD_API_KEY`, optional `SONATYPE_TOKEN` for best coverage.

Desktop app (individual application)

No repo clone required if the pip package is installed:

pip3 install tridentchain-security
cd apps/desktop && npm install && npm run start

See apps/desktop/README.md and docs/DISTRIBUTION_VERIFICATION.md.

AI / automation (Claude, OpenAI, Cursor, VS Code, Windsurf, …)

One install, every agent: pip install "tridentchain-security>=0.1.2" tridentchain-mcp

Guide	Description
Agent integrations	Claude · OpenAI · Cursor · VS Code · Windsurf · Zed · MCP · CLI
Capabilities	Everything you can do today
Architecture	MCP + unified tools design

./scripts/setup-agent-mcp.sh cursor   # prints setup for your agent

Phase 2 — Claude MCP: pip install tridentchain-mcp · Setup guide · Plugin

Phase 3 — OpenAI + Cursor: examples/openai/ · Cursor setup · .cursor/mcp.json.example

Phase 4 — VS Code (Anthropic MCP): Open repo → MCP ready · [VS Code setup](docs/VSC

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

85/100across 5 weighted dimensions

How we score →

0255075100

−15

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @tridentchain/security-cli against OSV.dev.

Inventory

Tools (2)

Click any tool to inspect its schema.

~43 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.DevInder1/tridentchain-security safe to use?: io.github.DevInder1/tridentchain-security has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.DevInder1/tridentchain-security?: io.github.DevInder1/tridentchain-security supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.DevInder1/tridentchain-security do?: io.github.DevInder1/tridentchain-security provides 2 tools: Development, License. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.DevInder1/tridentchain-security?: io.github.DevInder1/tridentchain-security is compatible with claude-desktop, cursor, claude-code. It uses http transport.
Is io.github.DevInder1/tridentchain-security actively maintained?: io.github.DevInder1/tridentchain-security is actively maintained — last commit was 22 days ago.

Similar servers

Others in other

View all →

Pi Lean Ctx95

Pi Coding Agent extension (CLI-first) — routes bash/read/grep/find/ls through lean-ctx CLI for strong token savings. Optional MCP bridge can register advanced tools.

3.0k 6

Headroom95

Compress tool outputs, logs, files, and RAG chunks before they reach the LLM. 60-95% fewer tokens, same answers. Library, proxy, MCP server.

55.0k 3

Sigmap94

97% token reduction for AI coding sessions — zero deps, 21 languages, MCP server

531 6

io.github.asklokesh/loki-mode94

Autonomous spec-to-product coding-agent CLI with an MCP server exposing 34 tools over stdio.

997 8

MCP Security Weekly

Get CVE alerts and security updates for io.github.DevInder1/tridentchain-security and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?