mcp-pin MCP
A local proxy and public log for Model Context Protocol servers that records SHA-256 fingerprints of tool definitions upon approval. It monitors every tools/list response during a session and blocks execution if definitions drift, ensuring agents only run approved tool instructions.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- Block tool definition drift in approved MCP servers
- Verify server integrity via signed public log
- Pin specific server versions to prevent code changes
Source and maintenance
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
mcp-pin 0.2.4
{
"version": "0.2.4",
"transport": "stdio",
"identifier": "mcp-pin",
"runtimeHint": "npx",
"registryType": "npm",
"packageArguments": [
{
"type": "positional",
"value": "lookup",
"description": "Run mcp-pin as an MCP server with four read-only lookup tools."
}
]
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Connect from your client
Each snippet configures the same source-provided package; replace placeholders before use.
Cursor
{
"mcpServers": {
"mcp-pin-mcp": {
"command": "npx",
"args": [
"-y",
"mcp-pin@0.2.4",
"lookup"
]
}
}
}Cline
{
"mcpServers": {
"mcp-pin-mcp": {
"command": "npx",
"args": [
"-y",
"mcp-pin@0.2.4",
"lookup"
]
}
}
}VS Code
{
"servers": {
"mcp-pin-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"mcp-pin@0.2.4",
"lookup"
]
}
}
}Claude Desktop
{
"mcpServers": {
"mcp-pin-mcp": {
"command": "npx",
"args": [
"-y",
"mcp-pin@0.2.4",
"lookup"
]
}
}
}Let your agent find its tools
Find servers like mcp-pin MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.