Trust score
80/100
MarketNow Registry / Security / mcp-tenant-isolation
mcp-tenant-isolation
Static analysis scanner for MCP server code and multi-tenant SaaS applications. 57 deterministic rules covering tenant isolation, tool visibility, cache key scoping, RLS, IDOR, and credential vault is
Security
v2.0.0
by GitHub Actions
Install risk
Runs registry code
Downloads / week
3,956
Source
npm-registry
Indexed
2026-09-10
Install
$ npx -y mcp-tenant-isolationInstalling via npx/uvx/npm install executes arbitrary code from the public registry on your machine. This is the install-risk semantic of the MarketNow catalog — verify the publisher before running it.
Adoption evidence: 3,956 weekly registry downloads.
How MarketNow scored this
Sentinel Index Heuristics — a security-first estimate from public signals:
- Package age and release activity (stale repositories lose points)
- Verified adoption: registry downloads or GitHub stars, not follower counts
- Typosquat distance against the 150 most-installed MCP packages
- Injection markers scanned in the package description
Heuristic, not a guarantee. For verified agent credentials and revocation, see the MarketNow Trust API.
What is mcp-tenant-isolation?
Static analysis scanner for MCP server code and multi-tenant SaaS applications. 57 deterministic rules covering tenant isolation, tool visibility, cache key scoping, RLS, IDOR, and credential vault is Indexed by MarketNow with trust 80/100 (Runs registry code).
How do I install it?
Run $ npx -y mcp-tenant-isolation Installing via npx/uvx/npm install executes arbitrary code from the public registry on your machine. This is the install-risk semantic of the MarketNow catalog — verify the publisher before running it.
What does the trust score mean?
Security-first heuristic over public signals (age, adoption, typosquat distance, injection markers). It is not a popularity ranking and not a guarantee of safety. mcp-tenant-isolation scores 80/100.