
Mcp Shield
Adds a security layer for AI agents connecting to MCP servers. Exposes six tools including check_trust to look up scores by URL or npm package, scan_server for live security analysis, and search_registry to query over 4,200 indexed servers. The pattern is straightforward: before connecting to any MCP server, call check_trust and refuse connections to anything graded D or F. Also includes payment tools for initiating USDC certification and verifying on-chain transactions. Connects to the CraftedTrust API at mcp.craftedtrust.com. Useful if you're building agents that dynamically connect to third-party MCP servers and need a trust gate similar to SSL certificate verification.
- tools
- 4
- transport
- HTTP
- last updated
- Mar 25, 2026
Install
From registry metadata$ npx add-mcp https://mcp.craftedtrust.com/api/v1/mcp --name mcp-shieldRun in your terminal. add-mcp asks which agents to add it to (Claude Code, Codex, Cursor and more). Add -g to install it for every project.
Review the command, arguments and environment values before installing. MCP servers run with your local permissions.
Other ways
Claude Code
$ claude mcp add --transport http mcp-shield https://mcp.craftedtrust.com/api/v1/mcpRun in your terminal. Add --scope user to make it available in every project.
Tools
Verified live · 4 toolsVerified live against the running server on Nov 6, 2026.
check_trustLook up the trust score for any MCP server by URL or npm package name. Returns score, grade, findings summary, and certification status.2 params
Look up the trust score for any MCP server by URL or npm package name. Returns score, grade, findings summary, and certification status.
npm_namestringserver_urlstringscan_serverTrigger a live trust scan of an HTTP or HTTPS MCP server. Returns trust score, grade, and security findings.1 params
Trigger a live trust scan of an HTTP or HTTPS MCP server. Returns trust score, grade, and security findings.
server_url*stringsearch_registrySearch the CraftedTrust registry overlay for indexed MCP packages and servers. Filter by grade, certification, or scan type.5 params
Search the CraftedTrust registry overlay for indexed MCP packages and servers. Filter by grade, certification, or scan type.
certifiedstringtrue · standard · premiumgradestringA · B · C · D · Flimitnumberquery*stringscan_typestringlive · static · combined · allget_statsGet CraftedTrust ecosystem statistics: total indexed servers, live verified count, average trust scores, flagged count, and more.
Get CraftedTrust ecosystem statistics: total indexed servers, live verified count, average trust scores, flagged count, and more.
No parameters. Call it with no arguments.
Sponsors
Readme
Trust-Gated Agent Examples
Reference implementations showing how to make AI agents check CraftedTrust before connecting to any MCP server. If a server scores D or F, the agent refuses to connect.
This is the "SSL certificate check for AI agents" pattern.
Quick Start
Add CraftedTrust to your agent's MCP config:
{
"mcpServers": {
"craftedtrust": {
"url": "https://mcp.craftedtrust.com/api/v1/mcp",
"description": "Check trust scores before connecting to MCP servers"
}
}
}
Your agent now has access to 6 tools:
| Tool | Description |
|---|---|
check_trust | Look up trust score by URL or npm name |
scan_server | Trigger a live security scan |
search_registry | Search 4,200+ indexed MCP servers |
get_stats | Ecosystem statistics |
pay_for_certification | Initiate USDC certification payment |
verify_payment | Verify on-chain payment |
The Pattern
Before your agent connects to any new MCP server:
- Call
check_truston CraftedTrust - If grade is D or F, refuse and explain why
- If grade is A/B/C, proceed with the connection
Examples
Python (LangGraph)
Details
- Repository
- github.com/cybercraftsolutionsllc/trust-gated-agent-example
- Categories
- AI & LLM Tools, Search & Web Crawling, Security & Pentesting
- Transport
- HTTP
- Registry
- MCP registry, active
- Tools verified
- Nov 6, 2026