← Home

@instantdb/mcp

npm Repository Homepage

Model Context Protocol (MCP) server for managing Instant apps, schemas, and permissions!

100
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

stopachkanezajdwwdrew-h

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Publisher changed to GitHub Actions as part of a CI/CD migration; SLSA provenance attestation confirms legitimate automated pipeline. This pattern is expected for this package going forward. ai
maintainer-change maintainer-removed AI (maintainer-change): Maintainer removal is consistent with the team's migration to GitHub Actions-based publishing; SLSA attestation confirms supply chain integrity. ai
typosquat typosquat.levenshtein:yup AI (typosquat): Scoped package @instantdb/mcp has no relation to 'yup'; levenshtein match is a false positive driven by the short suffix 'mcp' vs 'yup'. Stable false positive for this package. ai
phantom-deps phantom-dep:esbuild AI (phantom-deps): esbuild is used as a CLI build tool invoked at runtime, not imported as a module. This is a known legitimate pattern for bundler packages. ai

Versions (showing 100 of 201)

Version Deps Published
1.0.52 14 / 8
1.0.51 14 / 8
1.0.50 14 / 8
1.0.49 14 / 8
1.0.48 14 / 8
1.0.47 14 / 8
1.0.46 14 / 8
1.0.45 14 / 8
1.0.44 14 / 8
1.0.43 14 / 8
1.0.42 14 / 8
1.0.41 14 / 8
1.0.40 14 / 8
1.0.39 14 / 8
1.0.38 14 / 8
1.0.37 14 / 8
1.0.36 14 / 8
1.0.35 14 / 8
1.0.34 14 / 8
1.0.33 14 / 8
1.0.32 14 / 8
1.0.31 14 / 8
1.0.30 14 / 8
1.0.29 14 / 8
1.0.28 14 / 8
1.0.27 14 / 8
1.0.26 14 / 8
1.0.25 14 / 8
1.0.24 14 / 8
1.0.23 14 / 8
1.0.22 14 / 8
1.0.21 14 / 8
1.0.20 14 / 8
1.0.19 14 / 8
1.0.18 14 / 8
1.0.17 14 / 8
1.0.16 14 / 8
1.0.15 14 / 8
1.0.14 14 / 8
1.0.13 14 / 8
1.0.12 14 / 8
1.0.11 14 / 8
1.0.10 14 / 8
1.0.9 14 / 8
1.0.8 14 / 8
1.0.7 14 / 8
1.0.6 14 / 8
1.0.5 14 / 8
1.0.4 14 / 8
1.0.3 14 / 8
1.0.2 14 / 8
1.0.1 14 / 8
1.0.0 14 / 8
0.22.185 14 / 8
0.22.184 14 / 8
0.22.183 14 / 8
0.22.182 14 / 8
0.22.181 14 / 8
0.22.180 14 / 8
0.22.179 14 / 8
0.22.178 14 / 8
0.22.177 14 / 8
0.22.175 14 / 8
0.22.174 14 / 8
0.22.173 14 / 8
0.22.172 14 / 8
0.22.171 14 / 8
0.22.169 14 / 8
0.22.168 14 / 8
0.22.167 14 / 8
0.22.166 14 / 8
0.22.165 14 / 8
0.22.164 14 / 8
0.22.163 14 / 8
0.22.162 14 / 8
0.22.161 14 / 8
0.22.160 14 / 8
0.22.159 14 / 8
0.22.158 14 / 8
0.22.157 14 / 8
0.22.156 14 / 8
0.22.155 14 / 8
0.22.154 14 / 8
0.22.153 14 / 8
0.22.152 14 / 8
0.22.151 14 / 8
0.22.150 14 / 8
0.22.149 14 / 8
0.22.148 14 / 8
0.22.147 14 / 8
0.22.146 14 / 8
0.22.145 14 / 8
0.22.144 14 / 8
0.22.143 14 / 8
0.22.142 14 / 8
0.22.141 14 / 8
0.22.140 14 / 8
0.22.139 14 / 8
0.22.138 14 / 8
0.22.137 14 / 8
Showing 100 of 201 Next page →

v1.0.52

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.51

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.0.50

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.