servers / tooltrust-scanner
tooltrust-scanner MCP server
communitystdiolocalverifiedhealthy
Security scanner for AI agent tool definitions
01Tools · 5
How to read this: tool names here are observed from a live tools/list handshake. The Risk label is a heuristic inferred from the tool name (write/destructive verbs), not from executing the tool — a conservative guess, not a verified capability. We never escalate risk from a description. Found one that's wrong? Tell us — we fix on report.
| Tool | Risk | Side effects | Approval |
|---|---|---|---|
| tooltrust_list_rules Returns the full catalog of security rules used by the ToolTrust scanner, including rule IDs, titles, and descriptions. Useful for understanding what the scanner checks for. | read | false | unknown |
| tooltrust_scanner_scan Scan a list of AI agent tool definitions for security risks. Accepts an MCP tools/list JSON payload and returns a risk report with gateway policies (ALLOW, REQUIRE_APPROVAL, or BLOCK) for each tool. | read | false | unknown |
| tooltrust_lookup Look up historical security risk grades for an MCP server from the public ToolTrust Directory. Accepts the kebab-case name of the server and returns its full JSON scan report, or 404 if not found. | read | false | unknown |
| tooltrust_scan_config Reads the user's Claude Code MCP configuration and scans all configured servers in parallel. Searches for .mcp.json in the current directory, then ~/.claude.json as fallback. Returns a summary report with scan results for each server. Servers that fail to start are reported with an error note; scanning continues for remaining servers. | read | false | unknown |
| tooltrust_scan_server Connects to a live MCP server via standard input/output (stdio), parses its tools, and scans them for prompt injection, data exfiltration, and privilege escalation risks. Returns a risk report with gateway policies (ALLOW, REQUIRE_APPROVAL, or BLOCK) for each tool. | read | false | unknown |
02Install & source
npx -y tooltrust-mcp
npx- repohttps://github.com/AgentSafe-AI/tooltrust-scanner
- homepagehttps://www.tooltrust.dev/
- licenseMIT
- adoption19 stars · 6 forks
05Provenance & freshness
sourcesGitHub repo search [p4]
last_checked2026-08-03 08:55Z
next_check2026-08-04 13:39Z
cadenceevery 29h
verifiedtools_list:passed handshake:passed metadata:passed
index_statusindex — 8 unique facts >= 5
06Badge
Add the “as seen on MCPExplorer” badge to your README. 
[](https://mcpexplorer.com/servers/tooltrust-scanner)
Next step
This is one server. A loadout combines the right servers, governance, and proven plays for a whole job — assembled deliberately, not tool-dumped.
Explore loadouts →