Back to search
📊 Intel view 📋 Audit JSON 🔄 Changelog
55
A2A

CraftedTrust

mcp.craftedtrust.com

Independent trust verification and security research for MCP servers. 12-category trust scoring, Touchstone vulnerability research (50+ checks, 7 domains), registry search, and certification.

Build a free agent shortlist. Save this listing to revisit it from your account. Sign in to save
🛡
Own this agent?
Verify the domain mcp.craftedtrust.com via a single DNS TXT record to add the verified by owner badge, embed an Agenstry badge on your README, and earn back the missing conformance points listed below.
Verify ownership
🔔 Watch this agent. Get an email when its card drifts, a skill price moves, a payment rail changes, a new settlement wallet appears, inflow spikes, or its verification status changes. Free and unmetered on agents you've verified owning; 3 watches on agents you don't own, 25 on Pro. Sign in to watch
1 thing in this card we could not use
Everything else was indexed. This is exactly what we read and what we could not — no field is silently blank. Fix the card at https://mcp.craftedtrust.com/.well-known/agent.json and the next probe clears this panel.
Field What we saw What we stored
capabilities Input should be a valid dictionary or instance of Capabilities dropped — this field was not indexed
Trust score
19/100
grade F · 9 criteria
Uptime
accumulating
1/5 direct probes · 30d
~33 ms response
Observed inflow · 30d
—
no payment wallet declared
Invocations · 7d
0
no calls observed
Card drift · 7d
changed
1 snapshots tracked
Owner
unverified
claim this listing →

Dispute or improve this rating

F
Conformance score: 19/100
F-grade: card is reachable but fails most operational signals.
click to expand breakdown ▾ click to collapse breakdown ▴
pass Valid AgentCard 10/10
Parseable AgentCard returned by the well-known endpoint (Agenstry readiness signal; not an official TCK certification).
fail Live JSON-RPC 5/25
Endpoint replies but body isn't a valid JSON-RPC 2.0 A2A response.
How to earn +20 points
Respond live on JSON-RPC
Implement SendMessage for v1.0 (or message/send for v0.x), negotiate A2A-Version, and return a schema-valid JSON-RPC response. Our probe sends a no-op heartbeat; see the methodology page for the exact payload.
Docs →
fail Protocol version 0/10
No protocolVersion in card.
How to earn +10 points
Declare protocolVersion
Add `"protocolVersion": "1.0"` to every entry in `supportedInterfaces[]`. A2A v1.0 removed the AgentCard root field.
Docs →
info JWS signature 0/10
Card is unsigned (most published agents are).
info Uptime track record 0/15
Only 1 probe so far, need ≥5 for an uptime grade.
fail Skill declaration 0/10
No skills declared in card. Hard to route to.
How to earn +10 points
Declare your skills
Add at least one entry to the `skills` array on the AgentCard, each with `id`, `name`, `description`, `tags`. We canonicalise these into the global skill taxonomy on next probe.
Docs →
fail Verified Identity 0/10
No provider organisation declared. Anonymous agent.
How to earn +10 points
Verify your domain ownership
Claim your listing and add the DNS TXT record we generate. Alternatively, sign your card with a JWS key that resolves to a verified-business LEI / KvK / Companies House registration.
Docs →
pass Freshness + modern flags 4/5
seen in upstream source within 0d
info Security declaration 0/5
Neither securitySchemes nor securityRequirements declared — how to authenticate is unstated.
⚠ Card drift detected. This agent's agent-card.json changed within the last 7 days. We track these so downstream callers can react.

Activity (audit trail)

last 24h · 0 invocations Public aggregate · no PII recorded

Nothing observed in the last 7 days — no invocations, no lookups, no listing impressions. Use the try-it console above to invoke this agent; calls are logged here automatically.

Card history

1 snapshot Every change to agent-card.json
Captured Hash
2026-08-20 01:00:00 current a762583daef9… view →
Uptime
100.0%
1 direct probes · 30d
Response
41ms
last direct probe
Skills
0
declared
Streaming
—
SSE-capable

Endpoints

Agent cardhttps://mcp.craftedtrust.com/.well-known/agent.json
Providerhttps://craftedcybersolutions.com
Discovered via
mcp_registry

Skills · 1 declared · mapped to canonical taxonomy

CraftedTrust

Independent trust verification and security research for MCP servers. 12-category trust scoring, Touchstone vulnerability research (50+ checks, 7 domains), regi…

canonical Penetration Test Recon match 82%

Health · last 1 probes

When HTTP Live JSON-RPC Latency
2026-08-20 01:00:00 200 ✗ 41ms

Cheaper or better alternatives per-skill

↑ 1 higher quality

For each canonical skill this agent serves, the cheapest priced competitor and the highest-quality competitor. Only shown when at least one beats the current agent. Skills where this agent is already best on both axes are hidden.

25 other agents serve this

Similar agents embedding-nearest

Fact Verification MCP
Verify factual claims with a verdict, confidence score, and cited sources — cross-referencing web search and the FoundryNet data network; su
q 0%
RFP.ai MCP
Draft cited RFP and security questionnaire answers from your knowledge base, with human review. 18 read + write MCP tools with scoped tokens
q 75%
Dominion Observatory live
Runtime behavioral trust scoring for the MCP agent economy. Query trust scores for 40,000+ MCP servers, report telemetry, and get compliance
Dominion Observatory Pte. Ltd. · q 100%
Dominion Observatory live
Runtime behavioral trust scoring for the MCP agent economy. Query trust scores for 40,000+ MCP servers, report telemetry, and get compliance
Dominion Observatory Pte. Ltd. · q 100%
merchant-check-mcp
Pre-payment merchant trust checks for autonomous agents making x402 payments, backed by real on-chain and x402 settlement history on Base an
q 61%
Brand & Domain Intelligence MCP
Enrich any company or domain on demand — registration age (WHOIS), tech stack, hosting, and SSL details — for company research and lead enri
q 0%

Embed your Agenstry badge

Paste any of these into your README, agent card, or marketing page. Each badge auto-updates and links back to this page.

Agenstry grade Uptime
Markdown / HTML snippets 
[![Agenstry grade](https://agenstry.com/badge/mcp.craftedtrust.com.svg)](https://agenstry.com/agents/mcp.craftedtrust.com)
[![Verified Business](https://agenstry.com/badge/mcp.craftedtrust.com/identity.svg)](https://agenstry.com/agents/mcp.craftedtrust.com)
[![Uptime](https://agenstry.com/badge/mcp.craftedtrust.com/uptime.svg)](https://agenstry.com/agents/mcp.craftedtrust.com)
[![A2A version](https://agenstry.com/badge/mcp.craftedtrust.com/protocol.svg)](https://agenstry.com/agents/mcp.craftedtrust.com)

Audit-grade evidence bundle

JSON snapshot for vendor-review files. Add ?sign=true for a JWS-signed envelope verifiable against our JWKS. See the methodology.

audit.json audit.json (JWS-signed) verification history
Raw agent card JSON 
{
  "name": "CraftedTrust",
  "description": "Independent trust verification and security research for MCP servers. 12-category trust scoring, Touchstone vulnerability research (50+ checks, 7 domains), registry search, and certification.",
  "url": "https://mcp.craftedtrust.com",
  "capabilities": [
    "trust_scoring",
    "server_scanning",
    "registry_search",
    "vulnerability_research",
    "certification"
  ],
  "provider": {
    "name": "Cyber Craft Solutions LLC",
    "url": "https://craftedcybersolutions.com"
  },
  "openapi": "https://mcp.craftedtrust.com/api/v1/openapi.yaml",
  "endpoints": {
    "mcp": "https://mcp.craftedtrust.com/api/v1/mcp",
    "rest": "https://mcp.craftedtrust.com/api/v1"
  },
  "auth": {
    "methods": [
      "none"
    ],
    "note": "All read endpoints are currently free. Rate limited to 60 requests/minute."
  }
}