ProvenPin Install
New33 recipes passing on pinned versions

Code your agent can
check, not just trust.

ProvenPin is an MCP server that hands Claude Code, Cursor and other agents multi-library recipes that were actually run. Exact versions, real tests, and a receipt that updates every time a library ships.

Install free Browse recipes

Live receipts from the current index

passed3/3 tests
bcryptjs password hashing + jose JWT sessions
typescript2026-10-15 10:33 UTC
 passed4/4 tests
Celery 5 tasks, chains and groups tested in eager mode
python2026-10-15 10:33 UTC
 passed3/3 tests
Django 6 + Django REST Framework model API with pytest-django
python2026-10-15 10:33 UTC
 passed1/1 tests
Drizzle ORM + better-sqlite3 CRUD
typescript2026-10-15 10:33 UTC
 passed2/2 tests
Express 5 + Helmet + express-rate-limit hardening
typescript2026-10-15 10:33 UTC
 passed2/2 tests
Express 5 + jsonwebtoken auth middleware
typescript2026-10-15 10:33 UTC
 passed3/3 tests
Express 5 + Multer 2 file uploads with limits
typescript2026-10-15 10:33 UTC
 passed2/2 tests
Express 5 + pino-http structured request logging
typescript2026-10-15 10:33 UTC
 passed3/3 tests
Express 5 + Stripe webhook signature verification
typescript2026-10-15 10:33 UTC
 passed3/3 tests
Express 5 + Zod 4 request validation
typescript2026-10-15 10:33 UTC
 passed2/2 tests
FastAPI + PyJWT bearer auth
python2026-10-15 10:33 UTC
 passed2/2 tests
FastAPI + SQLAlchemy 2 CRUD with dependency-injected sessions
python2026-10-15 10:33 UTC
 passed3/3 tests
FastAPI + Stripe webhook signature verification
python2026-10-15 10:33 UTC
 passed1/1 tests
FastAPI background tasks + dependency overrides
python2026-10-15 10:33 UTC
 passed3/3 tests
Fastify 5 + @fastify/jwt protected routes
typescript2026-10-15 10:33 UTC
 passed2/2 tests
Fastify 5 routes with JSON Schema validation
typescript2026-10-15 10:33 UTC
 passed3/3 tests
Flask 3 + Flask-JWT-Extended access and refresh tokens
python2026-10-15 10:33 UTC
 passed2/2 tests
Flask 3 app factory + Flask-SQLAlchemy
python2026-10-15 10:33 UTC
 passed4/4 tests
Hono + hono/jwt bearer auth with Zod login
typescript2026-10-15 10:34 UTC
 passed3/3 tests
Hono + Zod validator API
typescript2026-10-15 10:34 UTC
 passed3/3 tests
httpx async API client + respx mocks
python2026-10-15 10:34 UTC
 passed1/1 tests
Kysely + better-sqlite3 typed queries
typescript2026-10-15 10:34 UTC
 passed3/3 tests
Next.js App Router + Stripe webhook handler
typescript2026-10-15 10:34 UTC
 passed3/3 tests
Next.js middleware + Supabase SSR session refresh
typescript2026-10-15 10:34 UTC
 passed1/1 tests
Prisma 7 + SQLite via better-sqlite3 adapter
typescript2026-10-15 10:34 UTC
 passed3/3 tests
Pydantic Settings typed config from env and .env
python2026-10-15 10:34 UTC
 passed2/2 tests
RQ background jobs tested with fakeredis
python2026-10-15 10:34 UTC
 passed2/2 tests
Socket.IO 4 rooms with handshake auth
typescript2026-10-15 10:34 UTC
 passed2/2 tests
SQLAlchemy 2 + Alembic programmatic migrations
python2026-10-15 10:34 UTC
 passed2/2 tests
SQLModel + FastAPI CRUD with in-memory SQLite
python2026-10-15 10:34 UTC
 passed3/3 tests
tRPC 11 + Zod router with server-side caller
typescript2026-10-15 10:34 UTC
 passed4/4 tests
Typed fetch API client tested with MSW + Zod
typescript2026-10-15 10:34 UTC
 passed4/4 tests
Typer CLI with subcommands, options and CliRunner tests
python2026-10-15 10:34 UTC
01 The problem

Agents break where libraries meet.

Docs tools answer one library at a time. The bugs live at the seams: a helper that changed shape, a cookie API that went async, a webhook signature that moved. ProvenPin ships the seam, already run.

Proof, not passages

A recipe is published only after it installs clean and its tests pass in a sandbox. If it never ran, your agent never sees it.

- const supabase = createServerClient(url, key, { cookies })+ const supabase = createServerClient(url, key, { cookies: { getAll, setAll } })example · the kind of drift a pinned, tested recipe catches

Exact pins

No caret ranges, no "latest". Every dependency is recorded at the version it was tested on.

next@16.4.1@supabase/ssr@0.12.7@supabase/supabase-js@2.117.3

Receipts that expire honestly

Status, test count, runtime and the time of the last pass. A failure turns it red; it does not stay quietly green.

passed3/3 · node v22.23.3

Built for MCP

Agents search by stack and task, then pull code with its versions and receipt in one call.

search_recipes · get_recipe · list_stacks

Current index

Counted from the published recipe files, not estimated.

Recipes
33
Libraries pinned
54
Languages
typescript, python
02 Re-tested on release

Every release is a new test run.

When any pinned library ships, the recipes that use it run again on the new version. Green moves the pin forward. Red flags the recipe and queues a repair.

Release timelineIllustration · not real release history
next@supabase/ssrstripe x.1 x.2 x.3 y.1 y.2 z.1 z.2 failed · repair queued z.2 fix z.3 x.4
● Install

One line. No key.

Hosted MCP server over Streamable HTTP. Pick your client.

terminal
claude mcp add --transport http provenpin https://mcp.provenpin.com/mcp

Any other MCP client: Streamable HTTP at https://mcp.provenpin.com/mcp. No API key, no signup.

03 How it works

Written, run, pinned, re-run.

Write

One job per recipe, the files it needs, and tests that exercise it.

Run

Clean sandbox, exact versions, full test suite. Fail means unpublished.

Pin

Every dependency recorded at the version that passed.

Re-run

New release, new run. The receipt reflects the latest result.

Read the details

● Early access

Hear when Pro opens.

The free server is live now. Join for Pro plan and new-stack announcements. No newsletter.