MCP Whitelist.com FORENSIC LOCKFILE ARCHIVE

← Back to MCP Whitelist Lookup Print 1-Page SOC 2 IT Sign-Off Sheet →

MCP23XXX (PyPI MCP)

Category: mcp_server · Network/Host: PyPI Registry · Version Pin: 0.0.3

NO-GO · BLOCKED

Point-in-Time Forensic Telemetry

Early or pre-release version (0.0.3)
Artifact SHA-256 verified (sha256-5bee0003751aa49...)
Source-only (sdist) package runs arbitrary setup.py during pip/uvx install
No public HTTPS source repository linked

SOC 2 CC6.1 / CC6.6 / CC8.1 CRYPTOGRAPHIC RECORD

Integrity Digest (SHA-512 / SHA-256): sha256-5bee0003751aa497777f9cf8f310e42c0f569d94072acf36370419d2727b9440

SLSA Build Provenance: Not attested by publisher

Install Execution Check: DETECTED: sdist-only: executes arbitrary setup.py during pip/uvx install

Maintainers / Runtime Deps: 1 maintainers · 0 runtime dependencies

COPY PINNED mcp.json ENTRY (ZERO VERSION DRIFT)

Scan Full Config →

{
  "mcpServers": {
    "pypi-mcp23xxx": {
      "command": "uvx",
      "args": [
        "MCP23XXX==0.0.3"
      ]
    }
  }
}

EMBED LIVE VERSION-PINNED README BADGE (FREE)

Last checked: 2026-11-13T09:26:16.879Z · Source ID: MCP23XXX==0.0.3 · Target: https://pypi.org/project/MCP23XXX/