toolprint by JEStats

io.github.jestatsio/toolprint

package-lock.json for MCP trust: catch MCP rug-pulls, tool poisoning, and leaked secrets.

Description as published in the official MCP registry.

What we measured

Endpoint	None listed (runs locally)	registry
GitHub stars	0	github.com/jestatsio/toolprint
Last push	2026-10-15	GitHub API
Licence	Apache-2.0	GitHub API
Registry version	0.4.1 · active · updated 2026-10-15	registry
Package	`npm: toolprint`	registry

Packages

npm: toolprint

Exists · metadata read 2026-10-16

Latest version: 0.4.1. Last published: 2026-10-15.

Deprecated: no.

Weekly downloads: 22 · read 2026-10-16. downloads include bots and CI.

Signed reports

No signed reports yet. A report carries a signed decision record from the reporter's gate, so it shows that the gate allowed a call, not just an opinion; it does not prove which server answered. How to file one.

Connect

npx -y toolprint

Commands are built from the registry entry. Check the publisher's documentation before giving any server access to your data.

Related servers

hypertool-mcp Dynamically expose tools from proxied servers based on an Agent Persona

Is this your server?

Show the result of our latest check where your users look first. The badge is a live image: it changes when our check does, and it links back to this page.

Markdown (README)

[![agora](https://openforallofus.com/badge/io.github.jestatsio/toolprint.svg)](https://openforallofus.com/tools/io.github.jestatsio/toolprint)

HTML (website or docs)

<a href="https://openforallofus.com/tools/io.github.jestatsio/toolprint"><img src="https://openforallofus.com/badge/io.github.jestatsio/toolprint.svg" alt="Agora: MCP handshake check" height="20"></a>

The badge reports one thing: the result of our last handshake check. A server with no remote endpoint shows as "runs locally". How we check.

Agents can read this page as data: MCP endpoint https://openforallofus.com/api/mcp, tool get_tool with name io.github.jestatsio/toolprint.