MCP server

ToolTrust Scanner

io.github.AgentSafe-AI/tooltrust-scanner

Checked 25 Oct 2026, 21:11 UTC · Still published on its registry; checked against OSV.dev; never run by us

Scans MCP servers for prompt injection, data exfiltration, and privilege escalation.

Runs on your computer

Source

At a glance

Type: MCP server
Publisher: Not verified
Status: Runs on your computer
Sets up in: Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code
Last checked: 25 Oct 2026, 21:11 UTC

Connect it to your agent

Add to Cursor Add to VS Code VS Code Insiders

Opens the app, which shows the server and asks you to confirm. It then runs the package on your computer with your permissions. For other apps, copy the setup below.

Claude Code

claude mcp add tooltrust-scanner -- npx -y tooltrust-mcp@1.0.9

Claude Desktop

{"mcpServers":{"tooltrust-scanner":{"command":"npx","args":["-y","tooltrust-mcp@1.0.9"]}}}

Codex (config.toml)

[mcp_servers.tooltrust-scanner]
command = "npx"
args = ["-y","tooltrust-mcp@1.0.9"]

Gemini CLI

{"mcpServers":{"tooltrust-scanner":{"command":"npx","args":["-y","tooltrust-mcp@1.0.9"]}}}

Cursor

{"mcpServers":{"tooltrust-scanner":{"command":"npx","args":["-y","tooltrust-mcp@1.0.9"]}}}

VS Code

{"servers":{"tooltrust-scanner":{"type":"stdio","command":"npx","args":["-y","tooltrust-mcp@1.0.9"]}}}

Runs on your computer with your permissions: check the package and its source before installing.

Browse

Related MCP servers

Axiom Agentic Tools
x402-paid Base agent tools (USDC). 5 deterministic tools. No API keys. No NFT pass.
Prompt Injection Scanner
Check text before your agent reads it: hidden instructions, invisible text and links that leak data.
ScorpTech x402 API
112 x402 pay-per-call tools: web data, security/OSINT, SEC and public data, Solana/EVM lookups
Verdict L402
Ask if an action is safe before your agent runs it: injection, shell, MCP installs. Free samples.
Skill Audit
MCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.
Tech Risk
MCP security scanner: tool-poisoning & prompt-injection audit (OWASP LLM01/08) + Base data
MYCELIX
Free, no-key, read-only MCP endpoint verification and diagnostics.
IA-QA — 130+ QA & Dev Tools for AI Agents
130+ QA & dev tools for AI agents: prompt injection, RAG testing, VLM eval, guardrails. Free.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.github.AgentSafe-AI/tooltrust-scanner.svg)](https://aptlynx.net/servers/io.github.AgentSafe-AI/tooltrust-scanner)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents