Find the correct MCP tool or CLI fallback for any npm operation, with message format guidance. Use this playbook first when unsure how to proceed to avoid ineffective approaches.
Verify MCP server functionality by sending a message and receiving an immediate echo response. A simple test tool to ensure server communication is working correctly.
Evaluate trust for MCP servers or AI agents before connecting. Provide GitHub, npm, or PyPI identifiers to receive a verdict based on HVTracker evidence.
Scaffolds a full MCP server project for a Salesforce org. Writes configuration files, entry point, and a sample tool to start building custom Salesforce integrations.
Scan npm MCP server packages for security risks like backdoors, dangerous code, and supply chain vulnerabilities. Download and analyze packages to generate detailed security reports with severity ratings before installation.
Vet a remote MCP server (npm:pkg, pypi:pkg, gh:owner/repo, or npm name) to get an evidence-backed verdict: severity, findings, provenance, and files scanned.
Validate local packages before publishing by building, creating an npm link, verifying MCP server startup, and checking command files to ensure release readiness.