Trust score
45/100
MarketNow Registry / Developer Tools / derive-to/derive
derive-to/derive
Publish anything your agent makes to a permanent versioned URL, read the review comments back, and revise, all without leaving the session. Chats scroll away. Artifacts stay. Derive is the system of
Developer Tools
v0.0.0
by derive-to
Install risk
Runs registry code
Source
smithery
Indexed
2026-09-10
Install
$ npx -y @smithery/cli@latest install derive-to/deriveInstalling via npx/uvx/npm install executes arbitrary code from the public registry on your machine. This is the install-risk semantic of the MarketNow catalog — verify the publisher before running it.
How MarketNow scored this
Sentinel Index Heuristics — a security-first estimate from public signals:
- Package age and release activity (stale repositories lose points)
- Verified adoption: registry downloads or GitHub stars, not follower counts
- Typosquat distance against the 150 most-installed MCP packages
- Injection markers scanned in the package description
Heuristic, not a guarantee. For verified agent credentials and revocation, see the MarketNow Trust API.
What is derive-to/derive?
Publish anything your agent makes to a permanent versioned URL, read the review comments back, and revise, all without leaving the session. Chats scroll away. Artifacts stay. Derive is the system of Indexed by MarketNow with trust 45/100 (Runs registry code).
How do I install it?
Run $ npx -y @smithery/cli@latest install derive-to/derive Installing via npx/uvx/npm install executes arbitrary code from the public registry on your machine. This is the install-risk semantic of the MarketNow catalog — verify the publisher before running it.
What does the trust score mean?
Security-first heuristic over public signals (age, adoption, typosquat distance, injection markers). It is not a popularity ranking and not a guarantee of safety. derive-to/derive scores 45/100.