Esrp Oss Mcp Test
Discover and validate Microsoft-trusted open-source packages before they enter your release or agent dependency graph.
Overview
ESRP OSS MCP Server is a MCP server for the Ship phase that exposes tools to discover and validate trusted Microsoft OSS packages for release and supply-chain checks.
What is this MCP server?
- Tools to discover and validate trusted Microsoft OSS packages through MCP
- Hosted streamable-http remote with ppe and prod environment choices
- Local stdio packages on npm, PyPI, NuGet, and OCI docker image
- Catalog version 26.527.121158 with multiple integration package versions listed
- Remote environments: ppe and prod (default ppe)
- 4+ distribution paths: npm, PyPI, NuGet, OCI docker stdio
What problem does it solve?
You cannot manually vet every transitive OSS package before ship, and one bad dependency can tank compliance or customer trust.
Who is it for?
Builders on Microsoft release or ESRP-style pipelines who need agent-assisted OSS trust checks before publishing.
Skip if: General vulnerability scanning of arbitrary repos with no Microsoft OSS trust workflow, or production use without understanding ppe vs prod hosted endpoints.
What do I get? / Deliverables
Your agent can query validation and discovery tools so trusted-package decisions are documented in the same session as your release prep.
- Agent-callable OSS discovery and validation tool results
- Documented trust checks aligned to Microsoft OSS package policies
- Configured remote or local ESRP MCP integration for CI or editor agents
Recommended MCP Servers
Journey fit
How it compares
Trusted OSS discovery MCP for Microsoft pipelines, not a standalone Snyk-style skill or generic npm audit wrapper.
Common Questions / FAQ
Who is ESRP OSS MCP Server for?
Developers and release owners who publish Microsoft-ecosystem OSS and want MCP-driven discovery and validation of trusted packages.
When should I use ESRP OSS MCP Server?
Use it in Ship security when finalizing dependencies, validating packages for release, or automating trust checks in an agent workflow.
How do I add ESRP OSS MCP Server to my agent?
Add the streamable-http remote URL with your env variable (ppe or prod), or install the npm, PyPI, NuGet, or OCI stdio package and register it in your MCP client.