sravanism.oss.mcp.server

ESRP MCP Server (NuGet)

A .NET library providing MCP (Model Context Protocol) tools for discovering and validating Microsoft certified OSS packages.

Features

• Certified Package Discovery: Get lists of Microsoft certified packages for Node.js, Python, and Java ecosystems
• Package Integrity Validation: Verify package integrity by comparing registry hashes with ESRP certified hashes
• Image SKU Validation: Validate whether image SKU updates are recommended

Installation

dotnet add package sravanism.oss.mcp.server

Or via NuGet Package Manager:

Install-Package sravanism.oss.mcp.server

Usage

Basic Setup

using sravanism.oss.mcp.server;
using sravanism.oss.mcp.server.Services;

// Create the service
var packageService = new CertifiedPackageService();

// Get certified Node.js packages
var nodejsPackages = await packageService.GetCertifiedNodeJsPackagesAsync();

// Get certified Python packages
var pythonPackages = await packageService.GetCertifiedPythonPackagesAsync();

// Get certified Java packages
var javaPackages = await packageService.GetCertifiedJavaPackagesAsync();

Validate Package Integrity

// Validate a package's integrity
var result = await packageService.ValidatePackageIntegrityAsync(
    purl: "pkg:npm/@azure/ai-text-analytics@5.0.0",
    registryHash: "sha512-abc123..."
);

Console.WriteLine(result.IsValid);
Console.WriteLine(result.Message);

Validate Image SKU Update

var skuService = new ImageSkuValidationService();
var result = skuService.ValidateImageSkuUpdate("2022-datacenter-azure-edition-dotnet8");

Console.WriteLine(result.IsRecommended);
Console.WriteLine(result.Message);

MCP Tools Available

Tool Name	Description
microsoftCertifiedNodeJsPackages	Get a list of Microsoft certified Node.js packages
microsoftCertifiedPythonPackages	Get a list of Microsoft certified Python packages
microsoftCertifiedJavaPackages	Get a list of Microsoft certified Java packages
validateMicrosoftPackageIntegrity	Validate the integrity of a Microsoft certified package
validateImageSKUUpdate	Validate whether an image SKU update is recommended

mcp-name: com.microsoft/esrp-oss-mcp-test

Data Files

The package includes embedded JSON data files:

• publishedPackages.json - List of certified packages by language
• packageHashes.json - Package hash information for integrity verification

License

MIT License