@mcpskillsio/server 2.4.2 → 2.5.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/README.md +14 -6
  2. package/index.js +6 -6
  3. package/package.json +4 -3
package/README.md CHANGED
@@ -1,8 +1,8 @@
1
1
  # @mcpskillsio/server
2
2
 
3
- Trust-score any AI skill or MCP server from inside Claude Code, Cursor, or any MCP client.
3
+ Use the MCPSkills pre-install trust layer from inside Claude Code, Cursor, or any MCP client.
4
4
 
5
- 13 standard signals (15 in Skills Mode) across 4 dimensions with safety scanning for prompt injection, credential theft, and supply chain attacks.
5
+ 13 standard signals (15 in Skills Mode) across 4 dimensions with safety scanning for prompt injection, credential theft, and supply chain attacks. Check install risk before an MCP server or AI skill reaches your agent.
6
6
 
7
7
  ## Install
8
8
 
@@ -46,7 +46,7 @@ Add to `claude_desktop_config.json`:
46
46
 
47
47
  ### `check_trust_score`
48
48
 
49
- Score any GitHub repo. Returns trust tier, composite score, and 4 dimension scores.
49
+ Score any GitHub repo, npm package, or registry URL. Returns trust tier, composite score, and 4 dimension scores.
50
50
 
51
51
  ```
52
52
  "Score anthropics/anthropic-sdk-typescript"
@@ -84,9 +84,17 @@ Start monitoring a repo for trust score changes (requires API key).
84
84
  "Watch modelcontextprotocol/servers for score changes"
85
85
  ```
86
86
 
87
+ ### `check_watched`
88
+
89
+ Re-scan all watched repos for score or tier changes (requires API key).
90
+
91
+ ```
92
+ "Check my watched repos"
93
+ ```
94
+
87
95
  ### `batch_check`
88
96
 
89
- Score up to 5 repos in a single call (Pro tier).
97
+ Score up to 5 repos in a single call (Developer Pro or Team).
90
98
 
91
99
  ```
92
100
  "Batch check these repos: anthropics/anthropic-sdk-typescript, langchain-ai/langchainjs"
@@ -110,7 +118,7 @@ Recommend a vetted, pre-scored stack from MCP Skills' curated packages.
110
118
 
111
119
  ## Full Reports
112
120
 
113
- Free tier returns trust tier + dimension scores (same as mcpskills.io free scans).
121
+ Free tier returns trust tier + dimension scores (same as mcpskills.io free scans, 10/day).
114
122
 
115
123
  For full reports (13 standard / 15 Skills Mode signals + safety findings) inside your IDE, set your API key:
116
124
 
@@ -118,7 +126,7 @@ For full reports (13 standard / 15 Skills Mode signals + safety findings) inside
118
126
  export MCPSKILLS_API_KEY=your_key_here
119
127
  ```
120
128
 
121
- Get your API key at [mcpskills.io/api](https://mcpskills.io/api).
129
+ Get your API key at [mcpskills.io/api](https://mcpskills.io/api). Developer Pro is $19/mo or $149/yr. Team is $99/mo for org/security workflows.
122
130
 
123
131
  ## How It Works
124
132
 
package/index.js CHANGED
@@ -13,7 +13,7 @@
13
13
  * - get_badge: Get trust badge URL for READMEs
14
14
  * - watch_repo: Monitor a repo for score changes
15
15
  * - check_watched: Re-scan all watched repos
16
- * - batch_check: Check up to 5 repos in one call (Pro)
16
+ * - batch_check: Check up to 5 repos in one call (Developer Pro or Team)
17
17
  * - auto_gate: "Should I install this?" → boolean + reason
18
18
  * - build_stack: "What tools do I need?" → vetted stack from live trust data
19
19
  *
@@ -222,7 +222,7 @@ function formatAgentResponse(data) {
222
222
  }
223
223
 
224
224
  if (data.certified) {
225
- lines.push('🏅 Certified Safe by MCP Skills');
225
+ lines.push('🏅 MCP Skills Verified');
226
226
  }
227
227
 
228
228
  lines.push('', 'Set MCPSKILLS_API_KEY for the full signal breakdown (13 standard / 15 Skills Mode).');
@@ -396,7 +396,7 @@ function formatSafetyResult(data) {
396
396
  const server = new Server(
397
397
  {
398
398
  name: "mcpskills",
399
- version: "2.4.2",
399
+ version: "2.5.1",
400
400
  },
401
401
  {
402
402
  capabilities: {
@@ -508,7 +508,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => {
508
508
  {
509
509
  name: "batch_check",
510
510
  description:
511
- "Check up to 5 repos or packages in one call. Returns a trust assessment for each. Requires a Pro API key. Accepts any mix of formats (owner/repo, npm packages, registry URLs).",
511
+ "Check up to 5 repos or packages in one call. Returns a trust assessment for each. Requires a Developer Pro or Team API key. Accepts any mix of formats (owner/repo, npm packages, registry URLs).",
512
512
  inputSchema: {
513
513
  type: "object",
514
514
  properties: {
@@ -800,7 +800,7 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
800
800
 
801
801
  if (!apiKey) {
802
802
  return {
803
- content: [{ type: "text", text: "batch_check requires a Pro API key. Set MCPSKILLS_API_KEY env var.\nGet one at https://mcpskills.io" }],
803
+ content: [{ type: "text", text: "batch_check requires a Developer Pro or Team API key. Set MCPSKILLS_API_KEY env var.\nGet one at https://mcpskills.io/api" }],
804
804
  isError: true,
805
805
  };
806
806
  }
@@ -861,7 +861,7 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
861
861
  // Agent compact response
862
862
  proceed = data.safe || data.certified;
863
863
  if (data.certified) {
864
- reason = `Certified Safe — verified by MCP Skills (${data.score}/10)`;
864
+ reason = `MCP Skills Verified (${data.score}/10)`;
865
865
  } else if (data.safe) {
866
866
  reason = `${data.tier} (${data.score}/10). ${data.reasoning || 'No disqualifiers.'}`;
867
867
  } else {
package/package.json CHANGED
@@ -1,7 +1,8 @@
1
1
  {
2
2
  "name": "@mcpskillsio/server",
3
- "version": "2.4.2",
4
- "description": "Trust-score any AI skill or MCP server from inside Claude Code, Cursor, or any MCP client. Accepts GitHub repos, npm packages, Smithery URLs, and OpenClaw skills. 15 signals (incl. OSV/KEV/EPSS vulnerability intelligence), safety scanning, OpenClaw frontmatter parsing + transparency scoring, recommendations, badges, monitoring, batch checking, auto-gate decisions, and stack building from live trust data.",
3
+ "version": "2.5.1",
4
+ "mcpName": "io.mcpskills/server",
5
+ "description": "Use the MCPSkills pre-install trust layer from Claude Code, Cursor, or any MCP client. Accepts GitHub repos, npm packages, Smithery URLs, and OpenClaw skills. 15 signals (incl. OSV/KEV/EPSS vulnerability intelligence), safety scanning, OpenClaw frontmatter parsing + transparency scoring, recommendations, badges, monitoring, batch checking, auto-gate decisions, and stack building from live trust data.",
5
6
  "type": "module",
6
7
  "main": "index.js",
7
8
  "bin": {
@@ -9,7 +10,7 @@
9
10
  },
10
11
  "scripts": {
11
12
  "start": "node index.js",
12
- "test": "node --test test/"
13
+ "test": "node --test test/*.test.js"
13
14
  },
14
15
  "keywords": [
15
16
  "mcp",