{"server":{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","name":"io.github.jestatsio/toolprint","description":"package-lock.json for MCP trust: catch MCP rug-pulls, tool poisoning, and leaked secrets.","title":"toolprint by JEStats","repository":{"url":"https://github.com/jestatsio/toolprint","source":"github"},"version":"0.4.1","websiteUrl":"https://jestatsio.github.io/toolprint/","packages":[{"registryType":"npm","identifier":"toolprint","version":"0.4.1","runtimeHint":"npx","transport":{"type":"stdio"},"packageArguments":[{"value":"serve","type":"positional"}],"environmentVariables":[{"description":"Default project directory for relative paths and lockfile discovery when a scan does not name one.","name":"TOOLPRINT_WORKDIR"},{"description":"Optional bearer token for authenticated remote MCP servers you ask toolprint to scan. Never written to the lockfile.","isSecret":true,"name":"TOOLPRINT_BEARER"}]}]},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","statusChangedAt":"2026-10-15T17:55:12.565396Z","publishedAt":"2026-10-15T17:55:12.565396Z","updatedAt":"2026-10-15T17:55:12.565396Z","isLatest":true}}}