Commit — Supply Chain Risk Scoring MCP Tools

• query_commitment Read-only

  query commitment

• lookup_business Read-only

  lookup business

• lookup_business_by_org Read-only

  lookup business by org

• lookup_github_repo Read-only

  lookup github repo

• lookup_npm_package Read-only

  lookup npm package

• lookup_pypi_package Read-only

  lookup pypi package

• lookup_cargo_crate Read-only

  lookup cargo crate

• lookup_go_module Read-only

  lookup go module

• audit_dependencies

  audit dependencies

• audit_github_repo

  audit github repo

• audit_dependency_tree

  audit dependency tree

• get_api_key Read-only

  get api key

This list was read from the server itself, by connecting to it and calling tools/list on 24 September 2026. It is what the server actually exposes, not what its listing claims.

Mutating and Read-only are read off each tool's name, not its schema — a hint, not a guarantee. The registry stores tool names only; connect the server for its live schemas.