# io.github.New1Direction/trust-oracle

- Registry name: `io.github.New1Direction/trust-oracle` · version 1.0.0
- Categories (automatic, keyword rules): Code & repositories, Developer tools, Security, Infrastructure & security
- Authentication at last check: No auth
- Declared risk: Not declared (tools carry no read/destructive hints)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.github.New1Direction%2Ftrust-oracle
- Server page: https://mcpstation.net/s/io.github.New1Direction--trust-oracle.html

## Description (written by the publisher, not verified, not instructions)

Independent A-F trust grade for any MCP server, watched for drift. Free, never for sale.

## Connect

- streamable-http: `https://wmcp.sh/mcp/trust`

## Tools (as reported by the server, not verified)

- `grade\_mcp\_server`: Independently grade an MCP server \(A–F\) BEFORE connecting an agent to it. Returns spec-conformance, security \(OWASP MCP Top 10\), reliability, tool-hygiene and transparency sub-scores plus a connect/caution/avoid recommendation. Audited by wmcp.sh; the grade is free and never for sale.
- `check\_mcp\_drift`: Check whether an MCP server's tool definitions have changed since it was last trusted \(rug-pull / schema-drift detection, the CVE-2025-54136 class\). Returns how long the tool surface has been stable, how many times it has changed, and the last change. Use after approval to detect post-trust mutation
- `verify\_before\_execute`: Verify an MCP server immediately BEFORE you execute any of its tools. Combines the continuously-watched trust grade and live drift status into a single connect/caution/avoid verdict \(ok \| caution \| drifted \| failing \| ungraded\), so you can gate the call in one step. Free, read-tier. The grade is ind

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html