pkgtruth MCP配置与使用教程

{
  "id": "io.github.hxckya/pkgtruth",
  "type": "mcp-server",
  "version": "0.1.2",
  "displayName": "pkgtruth",
  "description": "Catches hallucinated and slopsquatted npm packages before an agent installs them.",
  "repository": {
    "url": "https://github.com/hxckya/pkgtruth",
    "source": "github"
  },
  "distribution": {
    "packages": [
      {
        "registryType": "npm",
        "identifier": "pkgtruth",
        "version": "0.1.2",
        "transport": "stdio",
        "environmentVariables": [
          {
            "name": "PKGTRUTH_REGISTRY",
            "description": "Alternate npm registry to verify against. Defaults to https://registry.npmjs.org."
          },
          {
            "name": "PKGTRUTH_DOWNLOADS_API",
            "description": "Alternate downloads API used for adoption figures. Defaults to https://api.npmjs.org."
          },
          {
            "name": "PKGTRUTH_CACHE_DIR",
            "description": "Where adoption figures are cached between runs. Defaults to ~/.cache/pkgtruth."
          },
          {
            "name": "PKGTRUTH_TIMEOUT_MS",
            "description": "Per-request timeout in milliseconds. Defaults to 8000."
          }
        ]
      }
    ],
    "remotes": []
  },
  "dependencies": [],
  "installTargets": [
    "claude-code",
    "claude-desktop",
    "cursor",
    "vscode",
    "trae",
    "cherry-studio",
    "lingma",
    "windsurf",
    "cline",
    "workbuddy"
  ],
  "keywords": [],
  "provenance": {
    "origin": "official-mcp-registry",
    "originalId": "io.github.hxckya/pkgtruth",
    "originalUrl": "https://registry.modelcontextprotocol.io/v0.1/servers/io.github.hxckya%2Fpkgtruth/versions/latest",
    "isOfficial": true,
    "status": "active"
  }
}