Loading npm security reports…
The CuratedMCP agent — discover, run, audit, and govern every MCP server your AI tools (Claude, Cursor, Windsurf, Copilot, Gemini) use
Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.
dist/cli/add.js fetches remote command/args then writes them to the local stack.
dist/cli/add.jsView on unpkgdist/proxy.js automatically spawns every enabled stack entry on MCP-server startup.
dist/proxy.jsView on unpkgdist/cli/sync.js imports team-provided command/args into that same executable stack.
dist/cli/sync.jsView on unpkgdist/cli/add.js fetches remote command/args then writes them to the local stack.
dist/cli/add.jsView on unpkgdist/proxy.js automatically spawns every enabled stack entry on MCP-server startup.
dist/proxy.jsView on unpkgdist/cli/sync.js imports team-provided command/args into that same executable stack.
dist/cli/sync.jsView on unpkg