← Home

@instantdb/mcp

npm Repository Homepage

Model Context Protocol (MCP) server for managing Instant apps, schemas, and permissions!

51
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

stopachkanezajdwwdrew-h

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Publisher changed to GitHub Actions as part of a CI/CD migration; SLSA provenance attestation confirms legitimate automated pipeline. This pattern is expected for this package going forward. ai
maintainer-change maintainer-removed AI (maintainer-change): Maintainer removal is consistent with the team's migration to GitHub Actions-based publishing; SLSA attestation confirms supply chain integrity. ai
typosquat typosquat.levenshtein:yup AI (typosquat): Scoped package @instantdb/mcp has no relation to 'yup'; levenshtein match is a false positive driven by the short suffix 'mcp' vs 'yup'. Stable false positive for this package. ai
phantom-deps phantom-dep:esbuild AI (phantom-deps): esbuild is used as a CLI build tool invoked at runtime, not imported as a module. This is a known legitimate pattern for bundler packages. ai

Versions (showing 51 of 201)

View all versions
Version Deps Published
1.0.52 14 / 8
1.0.51 14 / 8
1.0.50 14 / 8
1.0.49 14 / 8
1.0.48 14 / 8
1.0.47 14 / 8
1.0.46 14 / 8
1.0.45 14 / 8
1.0.44 14 / 8
1.0.43 14 / 8
1.0.42 14 / 8
1.0.41 14 / 8
1.0.40 14 / 8
1.0.39 14 / 8
1.0.38 14 / 8
1.0.37 14 / 8
1.0.36 14 / 8
1.0.35 14 / 8
1.0.34 14 / 8
1.0.33 14 / 8
1.0.32 14 / 8
1.0.31 14 / 8
1.0.30 14 / 8
1.0.29 14 / 8
1.0.28 14 / 8
1.0.27 14 / 8
1.0.26 14 / 8
1.0.25 14 / 8
1.0.24 14 / 8
1.0.23 14 / 8
1.0.22 14 / 8
1.0.21 14 / 8
1.0.20 14 / 8
1.0.19 14 / 8
1.0.18 14 / 8
1.0.17 14 / 8
1.0.16 14 / 8
1.0.15 14 / 8
1.0.14 14 / 8
1.0.13 14 / 8
1.0.12 14 / 8
1.0.11 14 / 8
1.0.10 14 / 8
1.0.9 14 / 8
1.0.8 14 / 8
1.0.7 14 / 8
1.0.6 14 / 8
1.0.5 14 / 8
1.0.4 14 / 8
1.0.3 14 / 8
1.0.2 14 / 8

v1.0.52

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.51

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.50

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.