weiseer-mcp-doctor 0.1.0

Install-time supply-chain trust gate for MCP servers. PASS/WARN/BLOCK with cited evidence. Open-source rubric.

weiseer-mcp-doctor

Install-time supply-chain trust gate for MCP servers. PASS / WARN / BLOCK + cited evidence.

Python port of @weiseer/mcp-doctor. Same open-source rubric, same scoring. For users who prefer pip install and Python-based CI integrations.

Install

pip install weiseer-mcp-doctor

Use

# Single package
mcp-doctor @some/package

# Multiple
mcp-doctor zod @modelcontextprotocol/sdk @anthropic-ai/sdk

# JSON output (for CI)
mcp-doctor --json @some/package

What gets scored

20+ signals across 4 categories:

• Supply chain hygiene — postinstall scripts, unpinned deps, missing provenance, repo URL integrity
• Maintainer health — release cadence, archive status, bus factor, GitHub last-push age
• Known vulnerabilities — direct + transitive CVE via OSV.dev
• MCP-specific risk — typosquat against official servers, hardcoded credentials, capability misdeclaration

Full open-source rubric: github.com/weiseer/mcp-doctor/blob/main/rubric.yaml

Exit codes

• 0 — all PASS or WARN
• 1 — at least one BLOCK
• 2 — invalid usage

Useful in CI:

- run: pip install weiseer-mcp-doctor
- run: mcp-doctor @x/server-foo @y/server-bar

Why this exists

The MCP ecosystem has had several recent supply-chain incidents (MCPwn CVE-2026-33032, Atlassian MCP RCE, Shai-Hulud worm stealing auth tokens from 172 npm packages). mcp-doctor is the developer-friendly install gate, with the methodology open for audit.

A 200-package validation run is live at https://api.weiseer.com/dataset/scan_200.json. 3 BLOCK findings including 1 hardcoded LLM API key.

License

Apache-2.0. Rubric: open-source, fork-friendly.

Author

• [e-mail]
• github.com/weiseer