Trust verification for MCP servers. Check scores, scan for security issues, search 4,200+ servers.
Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"com-craftedtrust-mcp-shield": {
"command": "<see-readme>",
"args": []
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Trust verification for MCP servers. Check scores, scan for security issues, search 4,200+ servers.
No automated test available for this server. Check the GitHub README for setup instructions.
Five weighted categories — click any category to see the underlying evidence.
No known CVEs.
No package registry to scan.
Click any tool to inspect its schema.
This server is missing a description.If you've used it, help the community.
Add informationBe the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in security / developer-tools
A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.
XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.
Asynchronous coordination layer for AI coding agents: identities, inboxes, searchable threads, and advisory file leases over FastMCP + Git + SQLite
MCP server for accessing Figma plugin console logs and screenshots via Cloudflare Workers or local mode
MCP Security Weekly
Get CVE alerts and security updates for com.craftedtrust/mcp-shield and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
Reference implementations showing how to make AI agents check CraftedTrust before connecting to any MCP server. If a server scores D or F, the agent refuses to connect.
This is the "SSL certificate check for AI agents" pattern.
Add CraftedTrust to your agent's MCP config:
{
"mcpServers": {
"craftedtrust": {
"url": "https://mcp.craftedtrust.com/api/v1/mcp",
"description": "Check trust scores before connecting to MCP servers"
}
}
}
Your agent now has access to 6 tools:
| Tool | Description |
|---|---|
check_trust | Look up trust score by URL or npm name |
scan_server | Trigger a live security scan |
search_registry | Search 4,200+ indexed MCP servers |
get_stats | Ecosystem statistics |
pay_for_certification | Initiate USDC certification payment |
verify_payment | Verify on-chain payment |
Before your agent connects to any new MCP server:
check_trust on CraftedTrustSee python/trust_gated_agent.py for a complete LangGraph agent that gates MCP connections through CraftedTrust.
cd python
pip install -r requirements.txt
python trust_gated_agent.py
See typescript/trust-gated-client.ts for a TypeScript MCP client that checks trust scores before connecting.
cd typescript
npm install
npx tsx trust-gated-client.ts
Agent receives task → needs mcp.example.com
↓
Agent calls CraftedTrust check_trust("mcp.example.com")
↓
Score: 82/100, Grade: B ← Safe
↓
Agent connects to mcp.example.com ✓
Agent receives task → needs sketchy-server.xyz
↓
Agent calls CraftedTrust check_trust("sketchy-server.xyz")
↓
Score: 15/100, Grade: F ← Dangerous
↓
Agent refuses: "Server scored F (15/100). Not connecting." ✗
| Grade | Score | Meaning |
|---|---|---|
| A | 90-100 | Excellent security practices |
| B | 75-89 | Good security, minor improvements possible |
| C | 60-74 | Adequate but has gaps |
| D | 40-59 | Significant security issues |
| F | 0-39 | Critical issues, do not connect |
Full API documentation: mcp.craftedtrust.com/api-docs.html
MIT
Built by Cyber Craft Solutions LLC