MCP server

TrustScan

io.github.entradox/trust-scan

Checked 25 Oct 2026, 20:29 UTC · Connected to it and listed its tools

Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.

Working at last checkAbout 510 tokens per request once connected4 tools

https://trust-scan-production.up.railway.app/mcp/

At a glance

Type: MCP server
Publisher: Not verified
Status: Working at last check
Tools: 4
Token cost: About 510 tokens per request
Sets up in: Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok
Last checked: 25 Oct 2026, 20:29 UTC

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http trust-scan https://trust-scan-production.up.railway.app/mcp/

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.trust-scan]
url = "https://trust-scan-production.up.railway.app/mcp/"

Gemini CLI

{"mcpServers":{"trust-scan":{"httpUrl":"https://trust-scan-production.up.railway.app/mcp/"}}}

Cursor

{"mcpServers":{"trust-scan":{"url":"https://trust-scan-production.up.railway.app/mcp/"}}}

VS Code

{"servers":{"trust-scan":{"type":"http","url":"https://trust-scan-production.up.railway.app/mcp/"}}}

Antigravity

agy mcp add trust-scan https://trust-scan-production.up.railway.app/mcp/

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"trust-scan","server_url":"https://trust-scan-production.up.railway.app/mcp/","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"trust-scan","server_url":"https://trust-scan-production.up.railway.app/mcp/"}

trust_scan_file ~124 tokens
Security-scan a single file for invisible Unicode, dangerous patterns, and secrets. Returns a severity-weighted score and per-finding detail (rule, severity, location). Read-only: the file is never modified.
trust_scan_server ~212 tokens
Security-scan an MCP server or skill package before trusting it. Runs all four checks — invisible Unicode prompt-injection, dangerous code patterns (MCP001–006), hardcoded secrets, typosquat package names — and returns a 0-100 score, letter grade, and detailed findings. Run this on any directory BE

AgentAegis
Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.
X402 Endpoints
x402 paid API tools for AI agents on Base: EU/global registries, crypto, wallet & agent trust.
Tech Risk
MCP security scanner: tool-poisoning & prompt-injection audit (OWASP LLM01/08) + Base data
ScorpTech x402 API
112 x402 pay-per-call tools: web data, security/OSINT, SEC and public data, Solana/EVM lookups
Claude Skill Validator
Cloudflare Workers MCP server: claude-skill-validator
Skill Audit
MCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.
AgentAvow Trust
Signed, offline-verifiable safety scores for the MCP servers, packages & tools an agent connects to
Tanod Security
Contract and agent-package scans, phishing URL and OFAC checks, domain and header checks.

[![AptLynx](https://aptlynx.net/badge/io.github.entradox/trust-scan.svg)](https://aptlynx.net/servers/io.github.entradox/trust-scan)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents