Cryptographic trust infrastructure for MCP servers — signed manifests, TOFU pinning, two-gate enforcement, and the "npm audit" scanner.
View on GitHub ↗The "npm audit" for MCP servers. A trust card for every Model Context Protocol server — before you connect.
Every day, agents connect to MCP servers they've never met. They don't know whether the server installs, whether it speaks the current protocol, whether its tool schemas are valid, whether it exposes destructive tools, or whether it leaks secrets — until something breaks or something leaks.
mcp-trustcard gives every MCP server a public trust card in one command:
The MCP registry is growing fast. Security and quality verification are not. Recent research has found widespread exploitable weaknesses across MCP servers — tool poisoning, prompt injection via tool descriptions, shadowing, and secret leakage. Clients currently connect blind.
This project is a public ranking surface. If maintainers argue with a score, that's traction. If they ask how to improve, that's a product. If teams want private scanning, that's a company.
Check Pts What it probes --------- Installability 15 Does the package resolve and install from npm? Protocol handshake 25 Does it respond to initialize over stdio JSON-RPC? Tool schema validity 15 Are tools/list schemas well-formed JSON Schema? Destructive capabilities 10 Does it expose delete/drop/kill/overwrite tools? Authentication 10 Is auth required, absent, or unknown? Secret exposure 10 Do tool descriptions or errors leak secret-shaped strings? Protocol version 10 Does it negotiate the latest protocol version? Latency & failure rate 5 Handshake latency + 3-ping failure rate
From the project README.
Add the radar badge to your README — it shows your project was picked up by MCP Radar and links to this page:
[](https://mcp.liqiwa.com/s/davidnichols-ops--trustcard.html)
Scan MCP servers & AI-agent skills for malicious patterns (prompt injection in tool descriptions, credential exfil, download-and-execute). 17 patterns / 60 signatures, zero-dep. Measured over 196 publ
12122J/mcpvetMCP security scanner — vet a Model Context Protocol server before you add it to Claude Code, Cursor, or Windsurf. Grades it A–F, catching credential theft, tool-poisoning, and install-script payloads
pranee54/AgentDoctorLocal CLI that audits coding-agent configuration for security, instructions, context, and MCP — no API key or code upload by default.
sgateway/s-gwLocal credential control for AI coding agents.
frangelbarrera/code-review-agent-mcpAI code review agent MCP server. Reviews code like a kernel maintainer: blunt, technical, no sugarcoating. Detects bugs + OWASP Top 10 security vulnerabilities. 4 harshness levels. Anti-RLHF.
fengyincheng/ShellBridgeGive ChatGPT fast, safe, and auditable visibility into your VPS through MCP.
The top new MCP servers of the week, every Monday. No spam, unsubscribe anytime.