@instantdb/mcp
Model Context Protocol (MCP) server for managing Instant apps, schemas, and permissions!
1
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
stopachkanezajdwwdrew-h
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Publisher changed to GitHub Actions as part of a CI/CD migration; SLSA provenance attestation confirms legitimate automated pipeline. This pattern is expected for this package going forward. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Maintainer removal is consistent with the team's migration to GitHub Actions-based publishing; SLSA attestation confirms supply chain integrity. | ai | |
| typosquat | typosquat.levenshtein:yup | AI (typosquat): Scoped package @instantdb/mcp has no relation to 'yup'; levenshtein match is a false positive driven by the short suffix 'mcp' vs 'yup'. Stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:esbuild | AI (phantom-deps): esbuild is used as a CLI build tool invoked at runtime, not imported as a module. This is a known legitimate pattern for bundler packages. | ai |
Versions (showing 1 of 201)
| Version | Deps | Published |
|---|---|---|
| 0.22.35 | 12 / 8 |