Commit — Supply Chain Risk Scoring
io.github.piiiico/proof-of-commitment · v1.36.0 · MCP 2025-11-25
Supply chain risk scoring for npm, PyPI, Cargo, and Go. 9 tools. Behavioral signals.
Reachability
reachable
checked 2026-07-14 04:12 UTC
Registry status active
Tools pinned 12
66dc416eec3a
Tools last changed
unchanged since first capture 2026-07-14
Repo last push 2026-07-04
GitHub stars 7
Provenance
Registry namespace io.github.piiiico
(GitHub-account verified by the official registry)
Repository
github.com/piiiico/proof-of-commitment
Website
https://getcommit.dev
Remote endpoints
https://poc-backend.amdal-dev.workers.dev/mcp (streamable-http)
Observed changes
| When (UTC) | Event | Detail |
|---|---|---|
| 2026-07-14 04:12 | first capture | 12 tools pinned |
Pinned tool definitions (12)
| Tool | Description |
|---|---|
| query_commitment | Query verified behavioral commitment data for a domain. Returns aggregated signals: unique verified visitors, repeat visit rate, and average time spent. These prove real human engagement — harder to fake than reviews or content. |
| lookup_business | Search for a Norwegian business and get its commitment profile from public data (Brønnøysund Register Centre). Returns real commitment signals: longevity, financial health, employee count, and overall commitment score (0-100). Data... |
| lookup_business_by_org | Look up a specific Norwegian business by organization number (9 digits) and get its commitment profile. Returns temporal, financial, and operational commitment signals from Brønnøysund Register Centre. |
| lookup_github_repo | Get a behavioral commitment profile for any public GitHub repository. Returns real signals that prove genuine investment: how long the project has existed, recent commit frequency, contributor community size, release cadence, and social... |
| lookup_npm_package | Get a behavioral commitment profile for any npm package. Returns real signals that prove genuine investment: package age, download volume and trend (growing/stable/declining), release consistency, npm publisher count, GitHub contributor... |
| lookup_pypi_package | Get a behavioral commitment profile for any PyPI (Python) package. Returns real signals: package age, download volume and trend, release consistency, publisher/owner count, and linked GitHub activity. Supply chain attacks target Python... |
| lookup_cargo_crate | Get a behavioral commitment profile for any Rust crate on crates.io. Returns real signals: crate age, download volume (estimated weekly from 90-day totals), version count, publish cadence, owner count (users with publish access), team... |
| lookup_go_module | Get a behavioral commitment profile for any Go module on proxy.golang.org. Takes a full module path (e.g., "github.com/gin-gonic/gin", "golang.org/x/net", "k8s.io/client-go", "gopkg.in/yaml.v3") and returns real signals: module age,... |
| audit_dependencies | Batch-score multiple npm, PyPI, Cargo, or Go packages for supply chain risk. Takes a list of package names and returns a risk table sorted by commitment score (lowest = highest risk first). Risk flags: - CRITICAL: single publisher +... |
| audit_github_repo | Audit the supply chain risk of a GitHub repository's dependencies. Fetches the repo's package.json and/or requirements.txt from GitHub and runs behavioral commitment scoring on every dependency. This is the fastest way to audit a... |
| audit_dependency_tree | Map the full dependency tree of an npm package and identify CRITICAL supply chain risks at every level. Unlike auditing a flat list of packages, this tool traverses the dependency graph — showing not just your direct dependencies but... |
| get_api_key | Create a free Commit API key instantly — no browser required. When you've hit the daily free query limit (or just want faster access), call this tool with your email to get an API key returned directly in the chat. The key lifts the... |
Status badge
[](https://toolpin.dev/servers/io.github.piiiico/proof-of-commitment)
Maintain this server? Add the badge to your README — it links your users to this live status page.