MCP serverio.github.piiiico/proof-of-commitment

Supply chain risk scoring for npm, PyPI, Cargo, and Go.

Supply chain risk scoring for npm, PyPI, Cargo, and Go. 9 tools. Behavioral signals.

UNRATEDActivestreamable-httppoc-backend.amdal-dev.workers.dev

Overview

Score?

UNRATED 0.729

of what a free look can see, on 30 looks

Looks

last 15 hr ago

Tools

More info

URL

poc-backend.amdal-dev.workers.dev/mcp

streamable-http

Says it is

proof-of-commitment 1.14.0

protocol 2025-06-18

In the record since

32 days ago

Among servers18,413 with a card

0median 0.606 · this server 0.729 · highest on record 0.8561

Toolsfrom sha256:c0f8817464…690014

The tools this server lists, read out of the definition it returned
Tool	Schema
audit_dependencies Batch-score multiple npm, PyPI, Cargo, or Go packages for supply chain risk. Takes a list of package names and returns a risk table sorted by commitment score (lowest = highest ris	input · no output
audit_dependency_tree Map the full dependency tree of an npm package and identify CRITICAL supply chain risks at every level. Unlike auditing a flat list of packages, this tool traverses the dependency	input · no output
audit_github_repo Audit the supply chain risk of a GitHub repository's dependencies. Fetches the repo's package.json and/or requirements.txt from GitHub and runs behavioral commitment scoring on eve	input · no output
get_api_key Create a free Commit API key instantly — no browser required. When you've hit the daily free query limit (or just want faster access), call this tool with your email to get an API	input · no output
lookup_business Search for a Norwegian business and get its commitment profile from public data (Brønnøysund Register Centre). Returns real commitment signals: longevity, financial health, employe	input · no output
lookup_business_by_org Look up a specific Norwegian business by organization number (9 digits) and get its commitment profile. Returns temporal, financial, and operational commitment signals from Brønnøy	input · no output
lookup_cargo_crate Get a behavioral commitment profile for any Rust crate on crates.io. Returns real signals: crate age, download volume (estimated weekly from 90-day totals), version count, publish	input · no output
lookup_github_repo Get a behavioral commitment profile for any public GitHub repository. Returns real signals that prove genuine investment: how long the project has existed, recent commit frequency,	input · no output
lookup_go_module Get a behavioral commitment profile for any Go module on proxy.golang.org. Takes a full module path (e.g., "github.com/gin-gonic/gin", "golang.org/x/net", "k8s.io/client-go", "gopk	input · no output
lookup_npm_package Get a behavioral commitment profile for any npm package. Returns real signals that prove genuine investment: package age, download volume and trend (growing/stable/declining), rele	input · no output
lookup_pypi_package Get a behavioral commitment profile for any PyPI (Python) package. Returns real signals: package age, download volume and trend, release consistency, publisher/owner count, and lin	input · no output
query_commitment Query verified behavioral commitment data for a domain. Returns aggregated signals: unique verified visitors, repeat visit rate, and average time spent. These prove real human enga	input · no output

Verify it yourselfnpx teppi-check https://poc-backend.amdal-dev.workers.dev/mcpcurl -s https://api.teppi.xyz/v1/trust/mcp/mcs_01M1FZ2JWRWNMW8NCY6K67NXAS