mcp-lock
Rank #23950glama/mcpguards/mcp-lock
MCP servers are installed via npx -y @scope/package — which silently downloads the latest version every time your AI tool starts, with no integrity check. mcp-lock fixes this by recording exact tarball hashes on first run and detecting any changes on every run after that — the same guarantee npm ci gives you for Node.js projects.
mcp-lock is a Model Context Protocol (MCP) server published by mcpguards. It ranks #23950 of 58,832 servers tracked on MCP Toplist. mcp-lock is listed on Glama, and ships as a single rolling release with no explicit version metadata. It was first listed on Apr 17, 2026.
Ranks ahead of 34,882 of 58,832 servers on MCP Toplist.
Use mcp-lock
mcp-lock doesn’t publish a machine-readable install config. Follow the setup instructions in its repository ↗, or open one of its registry listings above.
Listed on 1 registry
mcpguards
Not versioned
This server is published through a registry that does not expose explicit version metadata, and no GitHub release tags were found on the linked repository. The listing tracks a single rolling release.
Frequently asked questions
- What is mcp-lock?
- MCP servers are installed via npx -y @scope/package — which silently downloads the latest version every time your AI tool starts, with no integrity check. mcp-lock fixes this by recording exact tarball hashes on first run and detecting any changes on every run after that — the same guarantee npm ci gives you for Node.js projects.
- Who maintains mcp-lock?
- mcp-lock is maintained by mcpguards, which publishes 1 MCP server (0 total versions) tracked on MCP Toplist.
- Is mcp-lock an official MCP server?
- mcp-lock is not on the Official MCP Registry. It is listed on Glama.
- How many versions does mcp-lock have?
- mcp-lock ships as a single rolling release with no explicit version metadata.
- Where can I find the source code for mcp-lock?
- The source code for mcp-lock is hosted at github.com/mcpguards/mcp-lock.