Mcpm

A runtime security guard for your AI's tools -- and the package manager to install them. Blocks prompt injection, tool poisoning, and credential exfiltration in live MCP traffic. Local-first, deterministic, no LLM in the enforcement path.

People connecting security tools to Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.

VERIFIED ACTIVE

LAST COMMIT 2026-08-23 · ★ 3 · #27 OF 182 MAINTAINED SECURITY · VERIFIED 2026-08-25

MIT · TypeScript servers · how we verify → /methodology

01 · Install Mcpm

Claude Code

claude mcp add getmcpm-cli -- npx -y @getmcpm/cli

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "getmcpm-cli": {
      "command": "npx",
      "args": [
        "-y",
        "@getmcpm/cli"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license MIT - declared in the repository

npm package @getmcpm/cli - published under the repo owner's npm scope (@getmcpm)

registry namespace io.github.getmcpm is GitHub-verified and matches the repo owner

03 · What Mcpm can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v0.30.0 · 2026-08-16

Other Changes · a trust threshold above what mcpm can award now says so · dogfood a published release off your own machine, with a hermetic HOME · clear the dependabot backlog, incl. a chalk major

v0.29.1 · 2026-08-14

Other Changes · engines.node promised Node versions the dependencies never supported · typecheck against every Node major CI builds on, not just the engines floor

v0.29.0 · 2026-08-12

Other Changes · trust-gate security fixes, two data-loss bugs, and remove an unsubstantiable regression claim · close the mass-delete the ceiling guard reopened, a lockfile tripwire disarm, and a lock-path collision

04 · Who maintains Mcpm

mcpm is maintained by getmcpm. It's the only MCP server we track from this author; the repo dates to Mar 2026.

05 · Facts

repository: github.com/getmcpm/cli
website: https://github.com/getmcpm/cli
category: security - ranked #27 of 182 actively-maintained security servers as of 2026-08-25.
release cadence: 10+ releases in the last 90 days (latest 2026-08-16)
registry: io.github.getmcpm/cli (active, first published 2026-03-30 · 3 versions)
packages: npm:@getmcpm/cli

06 · Mcpm FAQ

What is Mcpm?

Is Mcpm still maintained?

Yes - as of 2026-08-25, its last commit was 2026-08-23 and it shipped 10+ releases in the last 90 days. We re-verify nightly.

How do I install Mcpm?

Run `npx -y @getmcpm/cli`. You can also paste the ready-made client config above.

Does Mcpm run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Mcpm

Alternatives to Mcpm

Maintained security servers if Mcpm isn't the fit.

Pairs well with

Servers that cover what Mcpm doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · Bastion (gowthaman90) · Grovs · Coach Watts · Bug Bounty Intelligence

More TypeScript MCP servers · Munin · Rephonic · Sentry MCP · Weckr · see all