mcplay (PyPI MCP)
Category: mcp_server · Network/Host: PyPI Registry · Version Pin:
1.0.4
NO-GO ยท BLOCKED
Point-in-Time Forensic Telemetry
- Version-pinned release (1.0.4)
- Artifact SHA-256 verified (sha256-02038404c257ecc...)
- Source-only (sdist) package runs arbitrary setup.py during pip/uvx install
- Verified GitHub source repository linked
SOC 2 CC6.1 / CC6.6 / CC8.1 CRYPTOGRAPHIC RECORD
Integrity Digest (SHA-512 / SHA-256):
sha256-02038404c257ecc9dab3cfe258463c32abff63c0e54fc4f8768c0ca4d8b7d719SLSA Build Provenance: Not attested by publisher
Install Execution Check: DETECTED:
sdist-only: executes arbitrary setup.py during pip/uvx installMaintainers / Runtime Deps: 1 maintainers · 0 runtime dependencies
COPY PINNED
mcp.json ENTRY (ZERO VERSION DRIFT){
"mcpServers": {
"pypi-mcplay": {
"command": "uvx",
"args": [
"mcplay==1.0.4"
]
}
}
}
EMBED LIVE VERSION-PINNED README BADGE (FREE)
Last checked: 2026-11-13T09:26:16.879Z · Source ID:
mcplay==1.0.4
· Target: https://github.com/mtatton/mcplay