← MCP Scorecard · rated by proofof.ai

slsa-supply-chain-mcp

SLSA (Supply chain Levels for Software Artifacts) v1.0 framework. Compute SLSA level + remediati...

90/100  A+  · ranked #78 of 339 MEOK MCPs · v1.0.3 · 5 tools

Is slsa-supply-chain-mcp production-ready?

slsa-supply-chain-mcp scores 90/100 on the proofof.ai 100-point rubric — flagship-grade (top tier). That is above the fleet average of 85. Install: pip install slsa-supply-chain-mcp.

How does slsa-supply-chain-mcp score across the 10 categories?

CategoryScore
README10/10
Tool design10/10
Examples10/10
Tests + CI10/10
Transports5/10
Metadata10/10
Reliability8/10
Security10/10
Docs surface7/10
Provenance/Revenue10/10

What can slsa-supply-chain-mcp do?

Framework: fastmcp · transport: stdio. Tools: compute_slsa_level, validate_provenance, remediation_to_l3, list_requirements, verify_signed_artefact.

How to install slsa-supply-chain-mcp

pip install slsa-supply-chain-mcp

MCP client config: add {"command":"uvx","args":["slsa-supply-chain-mcp"]} under mcpServers.

Links