← Back to AgentWhitelist Lookup Print 1-Page SOC 2 IT Sign-Off Sheet →

aliyun-openapi-mcp-sdk (PyPI MCP)

Category: mcp_server · Network/Host: PyPI Registry · Version Pin: 1.4.0

NO-GO · BLOCKED

Point-in-Time Forensic Telemetry

Version-pinned release (1.4.0)
Artifact SHA-256 verified (sha256-c4eaff39415baf6...)
Source-only (sdist) package runs arbitrary setup.py during pip/uvx install
No public HTTPS source repository linked

SOC 2 CC6.1 / CC6.6 / CC8.1 CRYPTOGRAPHIC RECORD

Integrity Digest (SHA-512 / SHA-256): sha256-c4eaff39415baf6ff8d751fa9d08bedc712b7a6568c77840b09d02fa1253b044

SLSA Build Provenance: Not attested by publisher

Install Execution Check: DETECTED: sdist-only: executes arbitrary setup.py during pip/uvx install

Maintainers / Runtime Deps: 1 maintainers · 0 runtime dependencies

COPY PINNED mcp.json ENTRY (ZERO VERSION DRIFT)

Scan Full Config →

{
  "mcpServers": {
    "pypi-aliyun-openapi-mcp-sdk": {
      "command": "uvx",
      "args": [
        "aliyun-openapi-mcp-sdk==1.4.0"
      ]
    }
  }
}

EMBED LIVE VERSION-PINNED README BADGE (FREE)

Last checked: 2026-11-13T09:26:16.879Z · Source ID: aliyun-openapi-mcp-sdk==1.4.0 · Target: https://pypi.org/project/aliyun-openapi-mcp-sdk/