public evidence dossier

unpkg.com/mcp

The live page at mcp.unpkg.com identifies itself as “UNPKG MCP,” publishes the remote MCP endpoint https://mcp.unpkg.com/mcp, and documents its tools and connection flow. Independently, UNPKG’s own unpkg.com homepage explicitly describes “The UNPKG MCP server” and links users to mcp.unpkg.com, confirming this is vendor-official.

Latest visible observation: 2026-11-13T11:53:39.000Z

Run a preflight Open expert evidence

Identity

publisher identityVendor-official for unpkg (DNS-verified unpkg.com)

registry titleUnknown

namespacedomain · observed 2026-11-12 23:16:30

registry statusUnknown

origin systemshosted_endpoint, registry · observed 2026-11-13T11:53:39.000Z

Distribution

repositoryUnknown · observed 2026-11-12 23:16:30

npm packageUnknown · observed 2026-11-12 23:16:30

PyPI packageUnknown

hosted endpointhttps://mcp.unpkg.com/mcp · observed 2026-11-12T23:31:25.280Z

Maintenance and public findings

repository pushedUnknown

repository archivedUnknown · observed 2026-11-12 23:16:30

npm deprecatedUnknown · observed 2026-11-12 23:16:30

OSV package advisoryUnknown · observed 2026-11-12 23:16:30

Hosted liveness

last endpoint observationhealthy · observed 2026-11-12T23:31:25.280Z

reported MCP revision2025-06-18 · observed 2026-11-13 11:53:39

Limits

This dossier reports public evidence. It is not a safety, code, permission, scope, runtime, or penetration-test verdict. Missing evidence remains unknown.