Log inSubmit server
Supply Chain Guard logo

Supply Chain Guard

Offline MCP security scanner for vetting packages, extensions, plugins, images, and CI actions across 15 ecosystems.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install Supply Chain Guard

Pick your client, then add it in one click or paste the config.

STDIONode.js
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "supply-chain-guard": {
      "command": "npx",
      "args": [
        "-y",
        "supply-chain-guard"
      ]
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

We couldn’t confirm it starts correctly

The install command installed and started the server, which then stopped for configuration (such as an API key) that our sandbox does not have — expected for servers that connect to your account.

npx -y supply-chain-guard

Process exited before answering initialize.

This is an experimental automated check and can have false negatives — missing environment variables, a slow cold install, etc. It doesn’t necessarily mean something’s wrong. Last checked 1d ago.

Overview

The supply-chain-guard MCP server lets AI coding agents check software supply-chain inputs with a local, offline scanner. It reads repository manifests and lockfiles, including transitive dependencies, and matches known-malicious versions and threat indicators across 15 ecosystems. Use it when an agent needs to vet a package or project before installation without sending scan data over the network.

Use cases

  • Vet a package before an AI agent installs it
  • Scan transitive dependencies in a repository
  • Generate a CycloneDX SBOM for a project
  • Check provenance attestations offline
  • Gate changes on high or critical findings

Key features

  • Offline local scanning
  • 15-ecosystem threat matching
  • Manifest and lockfile discovery at any depth
  • CycloneDX 1.6 SBOM generation
  • SLSA and attestation analysis
  • Attack-chain incident correlation

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

Not checked yetLast checked Today

We have not completed a health check for this listing yet.

5/57 checks healthy over the last 37d

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 14d ago via OSV.dev · supply-chain-guard (npm)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars7Stargazers on the source repository.
npm downloads5.1kPackage downloads in the last 30 days.
Last commit17d agoMost recent push to the default branch.
Install checkRunsOur sandbox started it; it then asked for an API key or config.
Directory activity9 viewsConfig copies, upvotes, and views on AllMCPs.

How Supply Chain Guard works

What the supply-chain-guard MCP server does

The supply-chain-guard MCP server connects an AI coding agent to a locally running supply-chain security scanner. It is designed to help an agent inspect packages and other installable components before they enter a project. The scanner checks package, extension, plugin, provider, container image, and GitHub Actions identities against a signed threat feed.

Coverage includes npm, PyPI, RubyGems, Composer, NuGet, Cargo, Go modules, JVM build ecosystems, Dart and Flutter, Terraform and OpenTofu providers, container images, GitHub Actions, VS Code and Open VSX extensions, browser extensions, and JetBrains plugins. Matchers also exist for additional ecosystems that may report findings when matching indicators become available.

The scanner reads manifests and lockfiles at any depth in a repository. Lockfile analysis includes pinned transitive dependencies, not only direct dependencies. Detection covers known malicious releases and more than 350 threat indicators, including markers associated with GlassWorm, Vidar, Shai-Hulud, fake AI tool repositories, and account-takeover activity.

How it works

The supply-chain-guard MCP server runs the scanner locally through the package's MCP command. The scan itself makes no network request, so it can be used in environments where source and dependency data must remain local. Threat data is maintained separately: a daily feed can be refreshed when network access is available, then imported into an offline or air-gapped environment.

A version-specific match is required for a package release to be identified as malicious. The scanner keeps registry-specific identities separate and can match commit SHAs or container image digests independently of repository names. Beyond identity matching, it can generate CycloneDX 1.6 SBOMs, assess SLSA provenance, validate in-toto and DSSE attestations structurally, and correlate findings into attack-chain incidents.

Setup and configuration

Install the npm package globally, then register its MCP command with an AI coding client. The documented Claude setup is:

Terminal
npm install -g supply-chain-guard
claude mcp add supply-chain-guard supply-chain-guard mcp

The package requires Node.js 22 or newer. A project can also be scanned directly with supply-chain-guard scan .. Refresh the signed threat feed regularly with supply-chain-guard feed refresh; the scanner uses the cached feed for later scans. For disconnected networks, signed feed files can be transferred and loaded with the feed import workflow.

Avoid starting npx, npm exec, or npm run from inside an untrusted directory. The README warns that npm can place that directory's node_modules/.bin first on PATH before the scanner starts.

Tools and capabilities

For developers evaluating the supply-chain-guard MCP server in the Security category, relevant capabilities include:

  • Vetting packages and project dependencies before installation.
  • Scanning manifests and lockfiles throughout a repository.
  • Matching known-malicious components across supported ecosystems.
  • Producing CycloneDX 1.6 software bills of materials.
  • Checking SLSA provenance and parsing in-toto or DSSE attestations.
  • Correlating related findings into attack-chain incidents.

Limitations and notes

Detection depends on the signed feed and the indicators it contains. A scan exits with status 1 for a high-severity finding or an incomplete examination, and status 2 for a critical finding, which can support CI gating. The project is licensed under Apache 2.0.

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about Supply Chain Guard

supply-chain-guard is an MCP server that connects AI coding agents to a local supply-chain malware scanner. Its main capabilities are vetting packages and project dependencies, matching known-malicious components across 15 ecosystems, scanning manifests and lockfiles, generating CycloneDX SBOMs, and checking provenance attestations without sending scan data over the network.

Install it with npm, then register the MCP command with your client: `npm install -g supply-chain-guard` followed by `claude mcp add supply-chain-guard supply-chain-guard mcp`. Node.js 22 or newer is required.

Yes, project scans make no network request. Refresh the signed threat feed when network access is available, or transfer signed feed files into an air-gapped environment and import them for local scanning.

It exposes a standard MCP command, so compatibility depends on the client's support for locally run MCP servers and its configuration format.

Related MCP servers

All in Security All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewSupply Chain Guard AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/supply-chain-guard?style=directory)](https://allmcps.com/mcp/supply-chain-guard)
HTML Embed
<a href="https://allmcps.com/mcp/supply-chain-guard"><img src="https://allmcps.com/api/badge/supply-chain-guard?style=directory" alt="Supply Chain Guard on AllMCPs" /></a>