TridentChain Security

Overview

TridentChain Security is a Model Context Protocol (MCP) server: Local supply-chain CVE scanner via OSV/NVD. Scans deps and IDE extensions. No upload. Because it speaks the Model Context Protocol, AI assistants can use TridentChain Security as a set of callable tools instead of you copy-pasting between apps.

It runs locally: the Python package tridentchain-mcp (via uvx) speaks MCP over stdio on your machine. No credentials are required — it works out of the box. The current release is v0.1.5, published under the MIT license, with source at DevInder1/supply-chain-scanner-public on GitHub.

On mcp.site, TridentChain Security sits in the Development category. Any MCP client can use it — Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, Zed among them — via the install snippets below. If you maintain TridentChain Security for DevInder1, claim this listing to verify ownership, earn the Verified badge, and keep the details current.

Installation

// claude_desktop_config.json
{
  "mcpServers": {
    "tridentchain_security": {
      "command": "uvx",
      "args": [
        "tridentchain-mcp"
      ]
    }
  }
}