MCP Radar
MCP Server

TrustScan

io.github.entradox/trust-scan
Security Public & reachable MCP 2025-11-25

What this MCP does

Scans MCP servers, skills, and files for prompt-injection Unicode, dangerous code patterns, secrets, and typosquatting.

Capabilities

Tools

4 tools
read_skill
Read Skill
Read a product skill file by its skill:// URI.
Input schema 
{'type': 'object', 'required': ['uri'], 'properties': {'uri': {'type': 'string', 'description': 'e.g. skill://<product>/<skill-name>/SKILL.md\n Get valid URIs from `skills_list_tool`.'}}, 'additionalProperties': False}
Output schema 
{'type': 'object', 'additionalProperties': True}
skills_list_tool
Skills List Tool
List this product's skills. Each entry carries the SKILL.md URI, its name and description, verbatim frontmatter, and a per-file sha256 manifest. Read a body with `read_skill`.
Input schema 
{'type': 'object', 'properties': {}, 'additionalProperties': False}
Output schema 
{'type': 'object', 'additionalProperties': True}
trust_scan_file
Scan Single File
Security-scan a single file for invisible Unicode, dangerous patterns, and secrets. Returns a severity-weighted score and per-finding detail (rule, severity, location). Read-only: the file is never modified.
Read only Idempotent
Input schema 
{'type': 'object', 'required': ['filepath'], 'properties': {'filepath': {'type': 'string', 'description': 'absolute path of the file to scan'}}, 'additionalProperties': False}
Output schema 
{'type': 'object', 'additionalProperties': True}
trust_scan_server
Scan MCP Server or Skill Package
Security-scan an MCP server or skill package before trusting it. Runs all four checks — invisible Unicode prompt-injection, dangerous code patterns (MCP001–006), hardcoded secrets, typosquat package names — and returns a 0-100 score, letter grade, and detailed findings. Run this on any directory BEFORE wiring it into your agent. Read-only: never modifies the scanned target.
Read only Idempotent
Input schema 
{'type': 'object', 'required': ['path'], 'properties': {'path': {'type': 'string', 'description': 'directory or file path to scan (on the TrustScan host)'}, 'package_name': {'type': 'string', 'default': '', 'description': 'package name for typosquat detection (e.g. "mcp-server")'}}, 'additionalProperties': False}
Output schema 
{'type': 'object', 'additionalProperties': True}
History

Recent tool changes

Added
read_skill
Sept. 17, 2026, 12:41 p.m.
Added
skills_list_tool
Sept. 17, 2026, 12:41 p.m.
Added
trust_scan_file
Sept. 17, 2026, 12:41 p.m.
Added
trust_scan_server
Sept. 17, 2026, 12:41 p.m.
Discover

Similar MCP servers

osint-terminal

com.thetempleofdoom.osint-mcp/osint-terminal

Provides keyless OSINT and reconnaissance tools for domains, DNS, IPs, breach exposure, threat intelligence, and related lookups.

AIMEAT

io.aimeat/aimeat

Provides a self-hosted agent operating system with agent work delegation, access controls, federation, hooks, SSO, security admin…

hyperion

com.thetempleofdoom.hyperion/hyperion

Acts as a paid MCP tool marketplace and utility gateway with server discovery, HTTP and JavaScript tools, research, data conversi…

Vee3

io.github.Vee3io/vee3

Manages Clerk authentication infrastructure, including users, organizations, domains, sessions, tokens, OAuth, SSO, machines, per…

BorealHost

ai.borealhost/mcp

Provides web hosting and infrastructure management, including site deployment, DNS, domains, containers, compute, backups, cachin…

Proof Holdings

holdings.proof/mcp-server

Provides domain verification, identity and delegation proofs, human approval workflows, trusted-contact challenges, and controlle…

GoCreative Agent API

io.github.ColinHughes2121/gocreative-agent-api

Offers pay-per-call LLM completions and data services for company intelligence, KYB, sanctions screening, threat intelligence, co…

Japan Public Ledgers MCP

com.mcp-revenue-empire/japan-public-ledgers

Provides agent identity, memory, audit, trust, proxy, temporary email, webhook, CAPTCHA, and alerting capabilities alongside publ…