← Back to MCP Whitelist Lookup Print 1-Page SOC 2 IT Sign-Off Sheet →

iflow-mcp-vegalite-server (PyPI MCP)

Category: mcp_server · Network/Host: PyPI Registry · Version Pin: 0.0.1

NO-GO · BLOCKED

Point-in-Time Forensic Telemetry

Early or pre-release version (0.0.1)
Artifact SHA-256 verified (sha256-5e9c6b95927c04b...)
Source-only (sdist) package runs arbitrary setup.py during pip/uvx install
No public HTTPS source repository linked

SOC 2 CC6.1 / CC6.6 / CC8.1 CRYPTOGRAPHIC RECORD

Integrity Digest (SHA-512 / SHA-256): sha256-5e9c6b95927c04b595a9bc8e4f347517e98daea5aa94e724edacd8fb53ef9d0d

SLSA Build Provenance: Not attested by publisher

Install Execution Check: DETECTED: sdist-only: executes arbitrary setup.py during pip/uvx install

Maintainers / Runtime Deps: 1 maintainers · 2 runtime dependencies

COPY PINNED mcp.json ENTRY (ZERO VERSION DRIFT)

Scan Full Config →

{
  "mcpServers": {
    "pypi-iflow-mcp-vegalite-server": {
      "command": "uvx",
      "args": [
        "iflow-mcp-vegalite-server==0.0.1"
      ]
    }
  }
}

EMBED LIVE VERSION-PINNED README BADGE (FREE)

Last checked: 2026-11-13T09:26:16.879Z · Source ID: iflow-mcp-vegalite-server==0.0.1 · Target: https://pypi.org/project/iflow-mcp-vegalite-server/