How do I install TridentChain Security?

Copy the stdio config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.

Does TridentChain Security need an API key?

No required environment variable is listed on this record.

What transport does TridentChain Security use?

TridentChain Security runs locally over stdio.

When was TridentChain Security last checked?

Last checked 2026-11-09. Local supply-chain CVE scanner via OSV/NVD. Scans deps and IDE extensions. No upload.

TridentChain Security MCP server

Power your agent

Add this server

The publisher's own command. Not a PlugMCP endpoint.

Add to Cursor Add to VS Code Run on PlugMCP

Host a copy with our keys and logs.

Local command

uvx tridentchain-mcp==0.1.5

Claude Code has no install link for a local command. Copy the command below and run it in a terminal.

shClaude Code

1claude mcp add io.github.devinder1-tridentchain-security -- uvx tridentchain-mcp==0.1.5

Run in a terminal.

jsonClaude Desktop

1{2  "mcpServers": {3    "io.github.devinder1-tridentchain-security": {4      "command": "uvx",5      "args": [6        "tridentchain-mcp==0.1.5"7      ]8    }9  }10}

claude_desktop_config.json

Local · pypiPublisher installStep-by-step: add this in Claude

Remote URL or a command on your machine? How the two installs differ

Run on PlugMCP

Host a copy with our keys and logs.

A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.

Launch

Server facts

Local

Transport: stdio
Version: 0.1.5
Last checked

Tools

No tool list yet. Remote servers get one after the first health check.

FAQ

Questions

TridentChain Security

Local-first vulnerability scanner for project dependencies, developer tools, and IDE extensions.
Uses multi-source intelligence (OSV, NVD, GHSA, Sonatype) with KEV/EPSS prioritization.

No API key required for default usage.

Public repo: https://github.com/DevInder1/supply-chain-scanner-public

Install (plug and play)

pip3 install tridentchain-security
npm install -g @tridentchain/security-cli
tridentchain-security --help

Agents & MCP (Claude, Cursor, VS Code, Windsurf, Zed):

Pick whichever install path fits:

# Option A — pip (needs Python 3.10+)
pip3 install -U "tridentchain-security>=0.1.4" "tridentchain-mcp>=0.1.4"

# Option B — uvx (no manual Python install; uv handles it)
uvx tridentchain-mcp

# Option C — Docker (no Python needed, fully sandboxed)
docker pull ghcr.io/devinder1/tridentchain-mcp:latest
# Then in your MCP config, replace `python3 -m tridentchain_mcp` with:
#   command: docker
#   args: ["run", "--rm", "-i", "-v", "$PWD:/workspace", "ghcr.io/devinder1/tridentchain-mcp:latest"]

What you can do: docs/CAPABILITIES.md
Full guide: docs/INSTALL_AND_USE.md
Cross-platform (macOS / Linux / Windows): docs/CROSS_PLATFORM.md
(PyPI: tridentchain-security · npm: @tridentchain/security-cli)

tridentchain-security --scan all --project-path . --output-dir scanner-output

Use in your own Python app

from scanner import run_scan

summary = run_scan(
    project_path=".",
    scan="all",
    run_profile="full",  # no API key required
    output_dir="scanner-output",
)
print(summary["summary"])

Scan profiles

Profile	Description
`full` (default)	Project + system + extensions. OSV + NVD without keys.
`quick`	Faster project-focused scan.
`offline`	Local advisory DB only, no network.
Power-user	Add `GITHUB_TOKEN`, `NVD_API_KEY`, optional `SONATYPE_TOKEN` for best coverage.

Desktop app (individual application)

No repo clone required if the pip package is installed:

pip3 install tridentchain-security
cd apps/desktop && npm install && npm run start

See apps/desktop/README.md and docs/DISTRIBUTION_VERIFICATION.md.

AI / automation (Claude, OpenAI, Cursor, VS Code, Windsurf, …)

One install, every agent: pip install "tridentchain-security>=0.1.2" tridentchain-mcp

Guide	Description
Agent integrations	Claude · OpenAI · Cursor · VS Code · Windsurf · Zed · MCP · CLI
Capabilities	Everything you can do today
Architecture	MCP + unified tools design

./scripts/setup-agent-mcp.sh cursor   # prints setup for your agent

Phase 2 — Claude MCP: pip install tridentchain-mcp · Setup guide · Plugin

Phase 3 — OpenAI + Cursor: examples/openai/ · Cursor setup · .cursor/mcp.json.example

Phase 4 — VS Code (Anthropic MCP): Open repo → MCP ready · VS Code setup · ./scripts/vscode-mcp-install-link.sh · extension

Phase 5 — Validate: tridentchain-security --validate · MCP validate_after_patch · CAPABILITIES.md

Unified tool layer: from scanner.integrations import execute_tool, get_tool_definitions, to_openai_tools

Development

git clone https://github.com/DevInder1/supply-chain-scanner-public.git
cd supply-chain-scanner-public
python3 -m pip install -e .
tridentchain-security --help
python3 -m unittest scanner.tests.test_matcher_ranges -v

Install & use: docs/INSTALL_AND_USE.md
Cross-platform: docs/CROSS_PLATFORM.md
CLI contract: docs/cli-contract.md
Publishing: docs/PUBLISHING.md

Optional API keys (power users)

Variable	Purpose
`NVD_API_KEY`	Higher NVD rate limits
`GITHUB_TOKEN`	GHSA advisories
`SONATYPE_TOKEN`	Sonatype Guide advisories

Set in .env or environment variables.

License

MIT — see LICENSE

Add this server

Host a copy with our keys and logs.

Server facts

Tools

Questions

How do I install TridentChain Security?

Does TridentChain Security need an API key?

What transport does TridentChain Security use?

When was TridentChain Security last checked?

Documentation

TridentChain Security

Install (plug and play)

Use in your own Python app

Scan profiles

Desktop app (individual application)

AI / automation (Claude, OpenAI, Cursor, VS Code, Windsurf, …)

Development

Optional API keys (power users)

License