The server did not start in our isolated environment (MCP error -32001: Request timed out). Many servers need real credentials to start; static and supply-chain facts are still shown.
Findings
Live checks did not run.
Supply chain
Install scripts: yes (postinstall): code runs on install, before the server starts
Get the MCPVetter verified badge, a re-audit within 24 hours of every npm release, and an email whenever tools, findings, or Claude directory readiness change. $29 per server per month. You prove ownership first, free.