io.github.CallMarcus/securityscorecard-mcp MCP server
Checked 2026-09-08. Alive: yes. Handshake: not available.
Category: security. API and field schema.
Facts
| id | callmarcus--security-scorecard-mcp |
| name | io.github.CallMarcus/securityscorecard-mcp |
| registry_name | io.github.CallMarcus/securityscorecard-mcp |
| repo_url | https://github.com/CallMarcus/security-scorecard-mcp |
| endpoint_url | not available |
| transport | stdio |
| alive | yes |
| liveness_reason | not available |
| check_reachable | yes |
| check_recent_commit | yes |
| check_installable | yes |
| handshake_status | not available |
| handshake_checked_at | not available |
| handshake_protocol_version | not available |
| handshake_auth_hint | not available |
| handshake_auth_discoverable | not available |
| handshake_failure_layer | not available |
| handshake_latency_ms | not available |
| handshake_tools_state | not available |
| handshake_tool_count | not available |
| maintenance_status | active |
| last_commit_at | 2026-09-07T09:10:28Z |
| category | security |
| license_spdx | MIT |
How to install or connect
Run it with npx over stdio; the package coordinate is available through the API.
What the checks mean
alive combines the applicable repository, package, and endpoint checks. A null result is not verifiable, not a failure. The MCP handshake is a separate structural probe and is not a security audit. Read the methodology.