Claude MarketplacesSubmit
new1direction avatar

Trust Oracle

new1direction/webmcp-anything

A community trust scoring layer that runs on top of any MCP server in the ecosystem. It watches listed servers for behavioral drift, dependency changes, or permission creep, then assigns an A through F grade you can check before connecting. The oracle itself is independent and explicitly not for sale, so the incentive stays aligned with accuracy rather than promotion. If you're wiring up third-party MCP servers in production or you maintain a client that auto-discovers servers, this gives you a programmatic trust signal without auditing every repo yourself. Free to query, runs over streamable HTTP, and the grades update as the underlying servers change.

tools
3
transport
HTTP
last updated
May 30, 2026
View on GitHub

Install

From registry metadata
$ npx add-mcp https://wmcp.sh/mcp/trust --name trust-oracle

Run in your terminal. add-mcp asks which agents to add it to (Claude Code, Codex, Cursor and more). Add -g to install it for every project.

Review the command, arguments and environment values before installing. MCP servers run with your local permissions.

Other ways

Claude Code

$ claude mcp add --transport http trust-oracle https://wmcp.sh/mcp/trust

Run in your terminal. Add --scope user to make it available in every project.

Tools

Verified live · 3 tools

Verified live against the running server on Nov 6, 2026.

grade_mcp_serverIndependently grade an MCP server (A–F) BEFORE connecting an agent to it. Returns spec-conformance, security (OWASP MCP Top 10), reliability, tool-hygiene and transparency sub-scores plus a connect/caution/avoid recommendation. Audited by wmcp.sh; the grade is free and never f...2 params

Independently grade an MCP server (A–F) BEFORE connecting an agent to it. Returns spec-conformance, security (OWASP MCP Top 10), reliability, tool-hygiene and transparency sub-scores plus a connect/caution/avoid recommendation. Audited by wmcp.sh; the grade is free and never f...

Parameters* required
freshboolean
Force a live re-probe instead of returning a recent cached grade.
url*string
The MCP server endpoint URL to grade (e.g. https://mcp.example.com/mcp).
check_mcp_driftCheck whether an MCP server's tool definitions have changed since it was last trusted (rug-pull / schema-drift detection, the CVE-2025-54136 class). Returns how long the tool surface has been stable, how many times it has changed, and the last change. Use after approval to det...1 params

Check whether an MCP server's tool definitions have changed since it was last trusted (rug-pull / schema-drift detection, the CVE-2025-54136 class). Returns how long the tool surface has been stable, how many times it has changed, and the last change. Use after approval to det...

Parameters* required
url*string
The MCP server endpoint URL to check.
verify_before_executeVerify an MCP server immediately BEFORE you execute any of its tools. Combines the continuously-watched trust grade and live drift status into a single connect/caution/avoid verdict (ok | caution | drifted | failing | ungraded), so you can gate the call in one step. Free, read...2 params

Verify an MCP server immediately BEFORE you execute any of its tools. Combines the continuously-watched trust grade and live drift status into a single connect/caution/avoid verdict (ok | caution | drifted | failing | ungraded), so you can gate the call in one step. Free, read...

Parameters* required
freshboolean
Force a live re-probe instead of returning a recent cached grade (<6h).
url*string
The MCP server endpoint URL you are about to call.

Sponsors

Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthlyAgent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any language

Readme

WMCP — turn websites into tools for AI agents

One URL → discover tools → connect an MCP client → evaluate trust.

CI License: MIT Node.js 18+ Open MCP

Try WMCP · MCP Doctor · Read-only CLI · Native browser demo · MCP Trust Leaderboard · API docs

WMCP is a hosted URL-to-MCP gateway for Claude, Cursor, Codex and custom AI agents. It extracts candidate tools from public pages, structured data and documented APIs; exposes them over MCP; and offers separate trust grading for MCP servers. You can use the public service or self-host the Worker.

View the full README on GitHub

Details

Repository
github.com/new1direction/webmcp-anything
Website
wmcp.sh/mcp/trust
Transport
HTTP
Registry
MCP registry, active
Tools verified
Nov 6, 2026

More from new1direction