pkgproof for Windsurf
net.pkgproof/pkgproof
Verify an npm package before you install it: advisories, install scripts, typosquats, provenance.
client:Windsurf
transport:stdio
runtime:npm
Install pkgproof in Windsurf
~/.codeium/windsurf/mcp_config.json · windows: %USERPROFILE%\.codeium\windsurf\mcp_config.json
{
"mcpServers": {
"pkgproof": {
"command": "npx",
"args": [
"-y",
"@pkgproof/mcp"
],
"env": {
"PKGPROOF_ALGORAND_PRIVATE_KEY": "<PKGPROOF_ALGORAND_PRIVATE_KEY>",
"PKGPROOF_BASE_PRIVATE_KEY": "<PKGPROOF_BASE_PRIVATE_KEY>"
}
}
}
}Global only — Windsurf has no per-project MCP config. Refresh Cascade after saving. Windsurf docs