io.github.entradox/trust-scan · v0.1.0 · security
TrustScan is healthy: it completed an MCP handshake in 2316 ms and exposes 4 tools.
Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.
Endpoint: https://trust-scan-production.up.railway.app/mcp/ (streamable-http)
Repository · Website · JSON · Add to my inventory
| Users (last 30 days) | 0 |
| Handshake | Healthy |
| Auth needed | None |
| Tool count | 4 |
| Latency | 2316 ms |
| Last checked (UTC) | 2026-10-15T03:40:53.480Z |
| Checked (UTC) | Status | Latency | Error |
|---|---|---|---|
| 2026-10-15T03:40:53.480Z | Healthy | 2316 |
trust_scan_server | Security-scan an MCP server or skill package before trusting it. Runs all four checks — invisible Unicode prompt-injection, dangerous code patterns (MCP001–006), hardcoded secrets, typosquat package names — and returns a 0-100 score, letter grade, and detailed findings. Run this on any directory BE |
trust_scan_file | Security-scan a single file for invisible Unicode, dangerous patterns, and secrets. Returns a severity-weighted score and per-finding detail (rule, severity, location). Read-only: the file is never modified. |
skills_list_tool | List this product's skills. Each entry carries the SKILL.md URI, its name and description, verbatim frontmatter, and a per-file sha256 manifest. Read a body with `read_skill`. |
read_skill | Read a product skill file by its skill:// URI. |