mpak vs Trustify

Open-source package registry for MCP (Model Context Protocol) servers with built-in security scanning, trust scoring (L1-L4), and CLI. Every bundle verified across 25 supply-chain controls.

Integrates with Trustify supply chain security platforms to query SBOMs and packages, retrieve vulnerability information by CVE ID or PURL, analyze dependencies for security issues, and access advisory data for vulnerability management and compliance tracking.

MCP Servers

MCP Servers

4

—

—

—

—

—

—

—

—

41

3