Esrp Oss Mcp Test
Discover and validate Microsoft-trusted OSS packages through ESRP MCP tools before you pin dependencies in enterprise-leaning builds.
Overview
com.microsoft.esrp/esrp-oss-mcp-test is a MCP server for the Ship phase that helps agents discover and validate trusted Microsoft OSS packages via ESRP.
What is this MCP server?
- ESRP OSS MCP exposes tools to discover trusted Microsoft OSS packages
- Hosted remote with ppe or prod env selector on Azure Websites URL pattern
- Multiple stdio package paths: npm @microsoft/esrp-release-test-integration, PyPI, NuGet, and OCI Docker image
- Registry version 26.226.135743 with integration-test positioning in name
- Validates packages against Microsoft OSS trust workflows for release engineering
- Hosted env choices: ppe and prod
- Four stdio registry types listed: npm, PyPI, NuGet, OCI
- Registry server version 26.226.135743
What problem does it solve?
Pinning random npm or PyPI packages without a trust gate is risky for Microsoft-aligned releases, but manual ESRP checks do not fit an agent-first workflow.
Who is it for?
Developers on Microsoft release pipelines who want MCP-driven OSS discovery and validation in ppe or prod ESRP environments.
Skip if: Casual indie web apps with no Microsoft compliance requirements or builders who only need npm version bumps without trust policy.
What do I get? / Deliverables
After you configure the ESRP OSS MCP remote or stdio package, your agent can query and validate trusted OSS package paths before you cut a release.
- Discovery results for Microsoft-trusted OSS packages
- Validation outcome aligned with ESRP OSS tooling
- Clearer dependency choices before release tagging
Recommended MCP Servers
Journey fit
How it compares
Microsoft ESRP OSS trust-validation MCP, not a general open-source marketplace or CVE-only scanner.
Common Questions / FAQ
Who is com.microsoft.esrp/esrp-oss-mcp-test for?
Builders and release engineers working with Microsoft ESRP who want agents to discover and validate trusted OSS packages during ship and security review.
When should I use com.microsoft.esrp/esrp-oss-mcp-test?
Use it before production releases when you must confirm dependencies against Microsoft OSS trust tooling, especially in ppe or prod hosted environments.
How do I add com.microsoft.esrp/esrp-oss-mcp-test to my agent?
Point your MCP client at the Azure streamable-http URL with env ppe or prod, or install the stdio package for npm, PyPI, NuGet, or the published OCI image per registry identifiers.