# HVTracker MCP

> Pre-connect trust checks for AI agents and MCP servers using HVTracker's public trust registry.

- **Type:** MCP server
- **Install:** `agentstack add mcp-yugantm-hvtracker-mcp`
- **Verified:** Pending review
- **Seller:** [YugantM](https://agentstack.voostack.com/s/yugantm)
- **Installs:** 0
- **Latest version:** 0.1.1
- **License:** MIT
- **Upstream author:** [YugantM](https://github.com/YugantM)
- **Source:** https://github.com/YugantM/hvtracker-mcp
- **Website:** https://hvtracker.net

## Install

```sh
agentstack add mcp-yugantm-hvtracker-mcp
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# HVTracker MCP

MCP server for checking supply-chain trust before connecting to AI agents,
frameworks, or MCP servers.

The hosted remote server is:

```json
{
  "mcpServers": {
    "hvtracker": {
      "url": "https://hvtracker.net/mcp"
    }
  }
}
```

This repository also provides a local stdio package for clients that prefer
package-based installation.

## Tools

- `verify_mcp_server`: pre-connect trust verdict for an MCP server, package, GitHub repo, or agent name.
- `check_agent_trust`: compact trust profile for a tracked AI agent or framework.
- `search_agents`: search the HVTracker registry by name, repo, description, or category.

## Local Install

With npm:

```bash
npm install -g hvtracker-mcp
```

With PyPI:

```bash
python3 -m pip install hvtracker-mcp
```

Example MCP client config:

```json
{
  "mcpServers": {
    "hvtracker": {
      "command": "hvtracker-mcp"
    }
  }
}
```

## Development

```bash
python3 -m pip install -e ".[dev]"
python3 -m pytest
hvtracker-mcp
```

Use a different HVTracker base URL while testing:

```bash
HVTRACKER_BASE_URL=http://localhost:8080 hvtracker-mcp
```

## Registry Publishing

The official MCP Registry manifest is `server.json`.

```bash
mcp-publisher login github
mcp-publisher publish
```

In GitHub Actions, run the "Publish MCP Registry" workflow after the npm,
PyPI, and GHCR packages for the same version are live.

The server name is:

```text
io.github.YugantM/hvtracker-mcp
```

## Claude Desktop Extension

Tagged releases build an `.mcpb` bundle for Claude Desktop from `manifest.json`.
To build it locally:

```bash
npm ci --omit=dev
npx @anthropic-ai/mcpb@2.1.2 pack
```

## Privacy

HVTracker MCP sends the user-supplied search string or server identifier to
`https://hvtracker.net` to fetch public trust data. It does not require an API
key and does not write to user systems. See the HVTracker site for current data
and methodology, and see `PRIVACY.md` for the repository privacy note.

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [YugantM](https://github.com/YugantM)
- **Source:** [YugantM/hvtracker-mcp](https://github.com/YugantM/hvtracker-mcp)
- **License:** MIT
- **Homepage:** https://hvtracker.net

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free


## Versions

- **0.1.1** — security scan: pending review — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-yugantm-hvtracker-mcp
- Seller: https://agentstack.voostack.com/s/yugantm
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.