All servers · Maps, location & weather
TrustScan
io.github.entradox/trust-scan · v0.1.0
Measured by MCP Station
| Last check | Reachable |
|---|---|
| Checked at | — |
| Check success 7 / 30 days | — |
| First-try success 30 days | — |
| Median response | — |
| Lookups 30 days | — |
| Authentication | No auth |
| MCP version | 2025-06-18 |
| Rank score | — |
| Declared risk | Can write (some tools are not declared read-only) |
| Capabilities declared | logging, prompts, resources, tools |
| Tool definitions | 4 tools · with description 100% · input schema is an object 100% · read/destructive hints 50% |
Description written by the publisher, not verified
Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.
Connect
streamable-http · https://trust-scan-production.up.railway.app/mcp/
claude mcp add --transport http trust-scan https://trust-scan-production.up.railway.app/mcp/{
"mcpServers": {
"trust-scan": {
"url": "https://trust-scan-production.up.railway.app/mcp/"
}
}
}Tools as reported by the server
trust_scan_serverSecurity-scan an MCP server or skill package before trusting it. Runs all four checks — invisible Unicode prompt-injection, dangerous code patterns (MCP001–006), hardcoded secrets, typosquat package names — and returns a 0-100 score, letter grade, and detailed findings. Run this on any directory BEFtrust_scan_fileSecurity-scan a single file for invisible Unicode, dangerous patterns, and secrets. Returns a severity-weighted score and per-finding detail (rule, severity, location). Read-only: the file is never modified.skills_list_toolList this product's skills. Each entry carries the SKILL.md URI, its name and description, verbatim frontmatter, and a per-file sha256 manifest. Read a body with `read_skill`.read_skillRead a product skill file by its skill:// URI.
Repository · Website · JSON · Text for agents · Registry updated 2026-09-07