ToolTrust Scanner
Think of this as a linter that runs on your agent's tool surface. It connects to MCP servers over stdio, pulls every tool definition, and runs 16 static rules looking for prompt injection in descriptions, over-broad permissions, scope mismatches, arbitrary code execution patterns, and supply chain CVEs. You get letter grades A through F and a risk report you can act on. Ships as both an MCP server your agent can call to audit its own config and a CLI you can run in CI. The team scanned 207 servers and found 70% had at least one issue, with only 10% earning a clean A grade. Useful if you're wiring up third party MCP servers and want a second opinion before you hand over filesystem or exec access.
- GitHub stars
- 16
- tools
- 5
- transport
- STDIO
- last updated
- Mar 31, 2026
Tools
5 toolsPublic tool metadata for what this MCP can expose to an agent.
tooltrust_scan_configScan all MCP servers in your `.mcp.json` or `~/.claude.json`
Scan all MCP servers in your `.mcp.json` or `~/.claude.json`
No parameter schema in public metadata yet.
tooltrust_scan_serverLaunch and scan a specific MCP server by command
Launch and scan a specific MCP server by command
No parameter schema in public metadata yet.
tooltrust_scanner_scanScan a raw JSON blob of tool definitions
Scan a raw JSON blob of tool definitions
No parameter schema in public metadata yet.
tooltrust_lookupLook up a server's trust grade from the ToolTrust Directory
Look up a server's trust grade from the ToolTrust Directory
No parameter schema in public metadata yet.
tooltrust_list_rulesList all built-in security rules
List all built-in security rules
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageReadme
ToolTrust
ToolTrust Scanner
Static security scanner for MCP tool definitions
Trust grades (A–F) before your agent calls a tool — run as an MCP server, CLI, or CI check.
Details
- Repository
- github.com/agentsafe-ai/tooltrust-scanner
- Categories
- AI & LLM Tools, Data & Analytics
- Package
tooltrust-mcp- Transport
- STDIO
- Registry
- MCP registry, active
Related AI & LLM Tools MCP servers
View all
SentinelX MCPpensados/sentinelx-cloud-coreOperate Linux, macOS and Windows from your LLM. Every action runs through an auditable allowlist.0stars
Remembra Relayremembra-ai/remembraCross-agent handoff: the next coding agent starts from the last one's facts, not a blank page.16stars
Elefanteamenophis1er/elefanteOpen, Git-native memory protocol for MCP agents. Portable, versioned, human-editable.15stars
Figbridgerudraptpsingh/figbridgeFree, local MCP bridge for Figma — HTML, CSS, Tailwind, tokens, agent handoff bundles.15stars
Openfuse Mcpopenfused/openfusedEncrypted mail, shared memory, and persistent context for AI agents.14stars
Context Memjubakitiashvili/context-memPersistent memory for AI agents — 98%+ retrieval recall, 99% token savings, 44 tools13stars