mcpm

Package manager with trust scoring for searching, installing, and auditing MCP servers.

Manages MCP server packages across Claude Desktop, Cursor, VS Code, and Windsurf from the terminal. Runs trust assessments before installation, checking for hardcoded secrets, prompt injection patterns, and suspicious configurations. Supports both CLI usage and an agent mode that exposes package management functionality as callable tools.