14 #supply-chain MCP Servers & Clients

SchemaPin 🧷

ThirdKeyAI

The SchemaPin protocol for cryptographically signing and verifying AI agent tool schemas to prevent supply-chain attacks.

Atlas – Ai Transport Logistics Agent Standard

cargofy

Open-source MCP server for logistics. Runs inside your security perimeter — connects to TMS, ERP, email, and documents. Gives AI agents deep context about shipments, carriers, rates, and routes without data leaving your infrastructure.

Tooltrust Scanner

AgentSafe-AI

Scan MCP servers for security risks before your AI agent trusts them. Detects prompt injection, supply chain attacks (including the LiteLLM 1.82.7/1.82.8 backdoor), excessive permissions, arbitrary code execution, typosquatting, and tool shadowing. Add to your .mcp.json and let y

Track ocean containers across 200+ shipping lines by container, bill of lading, or booking number — live milestones, vessel positions, ETAs, and demurrage & detention free time. Remote streamable-HTTP server with a public demo key (no signup). Learn more at https://trackingmcp.co

17 free freight tools for AI agents — LDM/CBM/chargeable weight calculators, consignment calculator, pallet fitting, container capacity, ULD reference, vehicle types, ADR dangerous goods (2,939 entries), ADR exemption & LQ/EQ, HS codes (6,940), UK duty/VAT (live GOV.UK), INCOTERM

Compuute MCP Security Scanner

Compuute

Scan-as-a-Service for MCP servers — HTTP+MCP wrapper around compuute-scan

Container Tracking

lxxmng

DCSA container tracking across 228 ocean carriers — live vessel positions, ETAs, and demurrage & detention alerts. Remote MCP (streamable HTTP) at mcp.trackingmcp.com/mcp; free key at trackingmcp.com.

HimiTrace

hieuluongxuan

Model Context Protocol (MCP) server for HimiTrace enterprise supply-chain traceability, built with TypeScript & Server-Sent Events (SSE).

LiveDataLink

blackboxfoundry

Live and regularly refreshed public-data tools across multiple domains through LiveDataLink. A free API key includes 1,000 monthly queries; plans have fixed monthly allowances and no automatic overages.

Deterministic, machine-readable CVE and supply chain risk data for infrastructure, PyPI, and npm packages. Built for AI agents and coding assistants to act on directly, no CVSS interpretation required. Covers nginx, PostgreSQL, Redis, Docker, Kubernetes, and more.

Security scanner for AI Agent skills, plugins, and MCP servers. 39+ detection rules with AST taint tracking, A-F grading, and post-uninstall residue cleanup.

AgentAvow Trust

AgentAvow

Trust verification and security scanning for AI agents. Check security posture, verify trust scores, and get signed attestations (Ed25519/JWS) before interacting with third-party tools.

Hansatic

1aleksa

MCP server for the Hansatic packing API — truck & container load optimization for AI agents. Returns physically valid layouts with LDM, linear feet and pallet positions.