[ MCP SERVER SUMMARY ]
SafeDep MCP server summary
SafeDep `vet-mcp` helps in vetting open source packages for security risks, such as vulnerabilities and malicious code, before they're used in your project, especially with AI-generated code suggestions. Connect SafeDep through Bifrost MCP Gateway to centralize access control, virtual keys, and tool-call observability for your AI assistants.
| Property | Details |
|---|---|
| Company | Upstream maintainer |
| Connection type | Confirm upstream transport |
| Authentication | Varies by upstream server |
| Package or endpoint | See upstream documentation |
| Capabilities | SafeDep tools over MCP, AI assistant connectivity, Governed tool access through Bifrost |
| Official documentation | SafeDep MCP documentation |
Before you start
- Review the SafeDep upstream documentation for its installation requirements
- Obtain any credentials required by the upstream service
- A running Bifrost MCP Gateway instance
What you can do with SafeDep
- SafeDep `vet-mcp` helps in vetting open source packages for security risks, such as vulnerabilities and malicious code, before they're used in your project, especially with AI-generated code suggestions.
- Expose SafeDep tools to Claude, Cursor, and other MCP clients through one endpoint
- Apply virtual keys, tool allowlists, and audit logging at the gateway
[ HOW TO CONNECT ]
Connect SafeDep to Bifrost in three steps
Install Bifrost
Start the gateway locally or deploy in your VPC.
npx -y @maximhq/bifrost
Add SafeDep in MCP Gateway
Open MCP Gateway in the Bifrost dashboard, click New MCP Server, and select the transport documented by the upstream server. Or register via the API below.
• Confirm the transport, command or endpoint, and authentication requirements in the SafeDep upstream documentation.
• Replace every placeholder in the example before sending the request.
Point clients at Bifrost /mcp
Configure Claude Desktop, Cursor, or Claude Code to use your Bifrost endpoint with a virtual key instead of connecting directly to SafeDep.
{
"mcpServers": {
"bifrost": {
"url": "http://localhost:8080/mcp",
"headers": {
"Authorization": "Bearer vk_your_virtual_key"
}
}
}
}[ EXAMPLE CONFIG ]
Register SafeDep via API
Add this MCP client with a POST to /api/mcp/client. See Connecting to MCP Servers for full options.
# For a remote HTTP or SSE server:
curl -X POST http://localhost:8080/api/mcp/client \
-H "Content-Type: application/json" \
-d '{
"name": "safedep",
"connection_type": "<http|sse>",
"connection_string": "<upstream MCP endpoint>",
"tools_to_execute": ["*"]
}'
# For a local STDIO server:
curl -X POST http://localhost:8080/api/mcp/client \
-H "Content-Type: application/json" \
-d '{
"name": "safedep",
"connection_type": "stdio",
"stdio_config": {
"command": "<upstream command>",
"args": ["<arg>"]
},
"tools_to_execute": ["*"]
}'[ WHY BIFROST ]
Run SafeDep through one governed gateway
Access control
Virtual keys, RBAC, and tool allowlists per team or agent.
Cost governance
Attribute MCP tool spend alongside LLM usage in one view.
Observability
Log every tool call with latency, server, and virtual key metadata.
Credential isolation
Upstream secrets stay in the gateway — not on every laptop.
[ FAQ ]
Common questions
What does the SafeDep MCP server do?
SafeDep `vet-mcp` helps in vetting open source packages for security risks, such as vulnerabilities and malicious code, before they're used in your project, especially with AI-generated code suggestions. The exact tools available depend on the upstream server version and configuration.
How do I connect SafeDep to Bifrost?
Check the upstream documentation to determine whether SafeDep uses STDIO, Streamable HTTP, or SSE. Then add it as an MCP client in Bifrost using the corresponding command or endpoint.
Does Bifrost replace the SafeDep MCP server?
No. Bifrost connects to SafeDep as an upstream MCP client and adds a governed gateway between that server and your AI assistants.
[ RELATED SERVERS ]
More MCP integrations
Roundtable
Unified integration layer that bridges multiple AI coding assistants (Codex, Claude Code, Cursor, Gemini) through zero-configuration auto-discovery and enterprise-ready architecture.
Routine
MCP server to interact with Routine: calendars, tasks, notes, etc.
Rube
Rube is a Model Context Protocol (MCP) server that connects your AI tools to 500+ apps like Gmail, Slack, GitHub, and Notion. Simply install it in your AI client, authenticate once with your apps, and start asking your AI to perform real actions like "Send an email" or "Create a task."