Back to search
100
MCP live MCP 2026-07-28 streamable-http ext: ui

TrustScan

io.github.entradox/trust-scan

Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.

Watch this dependency Share evidence report
Uptime
100.0%
5 direct probes · 30d
Response
775ms
last probe
Tools
4
callable
Resources
1
readable
Prompts
0
available
Primary URL
https://trust-scan-production.up.railway.app/mcp/
Score: 100/100
Handshake verified by our own probe.
pass Answers the MCP handshake 50/50
The handshake and the list calls succeeded on the primary URL.
pass Lists tools, resources or prompts 30/30
4 tools, 1 resources, 0 prompts returned.
pass 3 or more catalogue items 10/10
5 items in total; 3 or more earns these points.
pass Describes itself 10/10
82 characters; more than 30 earns these points.

Tools · 4

trust_scan_server

Security-scan an MCP server or skill package before trusting it. Runs all four checks — invisible Unicode prompt-injection, dangerous code patterns (MCP001–006), hardcoded secrets, typosquat package …

trust_scan_file

Security-scan a single file for invisible Unicode, dangerous patterns, and secrets. Returns a severity-weighted score and per-finding detail (rule, severity, location). Read-only: the file is never m…

skills_list_tool

List this product's skills. Each entry carries the SKILL.md URI, its name and description, verbatim frontmatter, and a per-file sha256 manifest. Read a body with `read_skill`.

read_skill

Read a product skill file by its skill:// URI.

Resources · 1

trust-scan

Use before installing or trusting an MCP server or a skill package. TrustScan runs four checks — invisible Unicode, dangerous patterns, secrets, and supply-chain signals — on a single file or a whole …

skill://trust-scan/trust-scan/SKILL.md

How to use

Claude Desktop or claude.ai: add a custom connector (Customize → Connectors; on Team and Enterprise plans an owner adds it under Organization settings → Connectors) with this server URL: https://trust-scan-production.up.railway.app/mcp/

Cursor or Cline: add to your MCP config:

{
  "mcpServers": {
    "trustscan": {
      "url": "https://trust-scan-production.up.railway.app/mcp/",
      "transport": "streamable-http"
    }
  }
}