MCPs › mcp-lock
MCP servers are installed via npx -y @scope/package — which silently downloads the latest version every time your AI tool starts, with no integrity check. mcp-lock fixes this by recording exact tarball hashes on first run and detecting any changes on every run after that — the same guarantee npm ci gives you for Node.js projects.
Not monetized yet
Turn mcp-lock’s tool calls into revenue: one disclosed sponsored slot, 70% revenue share, fail-open by design.
Install mcp-lock
For anyone using mcp-lock — no Lulu account needed# stdio server — install per the repository README: https://github.com/mcpguards/mcp-lock
Real-time weather for any city, built on the lulu-ads widget gallery. First-party, free forever.
View server →FAQ
mcp-lock installs from source — follow the repository README.
Unrated out of 100, computed from cross-registry traction signals (installs, stars, registry presence) — never influenced by sponsorship.
Similar servers
Your server?
This is for the person who owns mcp-lock — adds Lulu Ads to your own code. Not the install steps above, those are for your users.
Copies a ready prompt: your coding agent installs the lulu-ads SDK, wires the slot, and applies the widget design guide.
or set up manually at getlulu.dev/publishers
Get verified so you can edit the page. Your badge is already live below — no claim needed for that.
Managed hosting with monetization built in — waitlist.
[](https://getlulu.dev/mcps/mcp-lock)