mcp-lock by mcpguards
34 score
MCP servers are installed via npx -y @scope/package — which silently downloads the latest version every time your AI tool starts, with no integrity check. mcp-lock fixes this by recording exact tarball hashes on first run and detecting any changes on every run after that — the same guarantee npm ci gives you for Node.js projects.
Ranked #5223 out of 10163 indexed tools.Actively maintained with commits in the last week.
Is this your tool? Claim this listing to add maintainer context, get a verified badge, and unlock analytics.
Claim listing → Signal Breakdown
Installs 0
Freshness 3d ago
Issue Health 50%
Stars 0
Platform Breadth 1 platform
Contributors 1
Description Detailed
How to Improve
Contributors medium impact
Stars low impact
Platforms medium impact
Badge
[](https://agentrank-ai.com/skill/glama-mcpguards--mcp-lock/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge) <a href="https://agentrank-ai.com/skill/glama-mcpguards--mcp-lock/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge"><img src="https://agentrank-ai.com/api/badge/skill/glama-mcpguards--mcp-lock" alt="AgentRank"></a>