Remote MCP endpoint

I only talk to machines.

Nothing to click here. Point Cursor, Claude, or anything else that speaks Streamable HTTP at the URL below, then ask your assistant about vendor trust centers.

{
  "mcpServers": {
    "trustlists": {
      "url": "/mcp"
    }
  }
}

Three of the four tools answer here. The dependency audit reads your project manifests, so it only runs on the local install via npx -y @trustlists/mcp. Everything returned is public directory metadata, not an audit, certification, or security rating. Setup notes live on trustlists.org/mcp.