MarketNow Registry / Security / @dauthau/mcp-dauthau

@dauthau/mcp-dauthau

Node.js MCP wrapper kết nối AI tool (Claude Code, Cursor, ...) tới dịch vụ tra cứu đấu thầu DauThau. Apisecret giữ local, ký hashsecret mỗi request.

Security v0.1.9 by GitHub Actions

Trust score

72/100

Install risk

Runs registry code

Downloads / week

100

Source

npm-registry

Indexed

2026-09-10

Install

$ npx -y @dauthau/mcp-dauthau

Installing via npx/uvx/npm install executes arbitrary code from the public registry on your machine. This is the install-risk semantic of the MarketNow catalog — verify the publisher before running it.

Adoption evidence: 100 weekly registry downloads.

How MarketNow scored this

Sentinel Index Heuristics — a security-first estimate from public signals:

Package age and release activity (stale repositories lose points)
Verified adoption: registry downloads or GitHub stars, not follower counts
Typosquat distance against the 150 most-installed MCP packages
Injection markers scanned in the package description

Heuristic, not a guarantee. For verified agent credentials and revocation, see the MarketNow Trust API.

What is @dauthau/mcp-dauthau?

Node.js MCP wrapper kết nối AI tool (Claude Code, Cursor, ...) tới dịch vụ tra cứu đấu thầu DauThau. Apisecret giữ local, ký hashsecret mỗi request. Indexed by MarketNow with trust 72/100 (Runs registry code).

How do I install it?

Run $ npx -y @dauthau/mcp-dauthau Installing via npx/uvx/npm install executes arbitrary code from the public registry on your machine. This is the install-risk semantic of the MarketNow catalog — verify the publisher before running it.

What does the trust score mean?

Security-first heuristic over public signals (age, adoption, typosquat distance, injection markers). It is not a popularity ranking and not a guarantee of safety. @dauthau/mcp-dauthau scores 72/100.