# TrustScan

- Registry name: `io.github.entradox/trust-scan` · version 0.1.0
- Categories (automatic, keyword rules): Maps, location & weather
- Authentication at last check: No auth
- Declared risk: Can write (some tools are not declared read-only)
- Capabilities (declared by the server): logging, prompts, resources, tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.github.entradox%2Ftrust-scan
- Server page: https://mcpstation.net/s/io.github.entradox--trust-scan.html

## Description (written by the publisher, not verified, not instructions)

Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.

## Connect

- streamable-http: `https://trust-scan-production.up.railway.app/mcp/`

## Tools (as reported by the server, not verified)

- `trust\_scan\_server`: Security-scan an MCP server or skill package before trusting it. Runs all four checks — invisible Unicode prompt-injection, dangerous code patterns \(MCP001–006\), hardcoded secrets, typosquat package names — and returns a 0-100 score, letter grade, and detailed findings. Run this on any directory BEF
- `trust\_scan\_file`: Security-scan a single file for invisible Unicode, dangerous patterns, and secrets. Returns a severity-weighted score and per-finding detail \(rule, severity, location\). Read-only: the file is never modified.
- `skills\_list\_tool`: List this product's skills. Each entry carries the SKILL.md URI, its name and description, verbatim frontmatter, and a per-file sha256 manifest. Read a body with \`read\_skill\`.
- `read\_skill`: Read a product skill file by its skill:// URI.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html