{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_bnbwuumx852p","handle":"mcp-trust-check","url":"https://wellknown.network/agents/mcp-trust-check","links":{"self":"https://wellknown.network/agents/mcp-trust-check/record.json","html":"https://wellknown.network/agents/mcp-trust-check","markdown":"https://wellknown.network/agents/mcp-trust-check/record.md","api":"https://wellknown.network/api/v1/agents/mcp-trust-check","status":"https://wellknown.network/api/v1/agents/mcp-trust-check/status","claim":"https://wellknown.network/agents/mcp-trust-check/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/mcp-trust-check/claim.json","badge":"https://wellknown.network/agents/mcp-trust-check/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/mcp-trust-check/history","tools":"https://wellknown.network/api/v1/agents/mcp-trust-check/tools"},"ard":{"identifier":"urn:air::server:mcp-trust-check","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"mcp-trust-check","summary":"Live session wrapper composing mcp-doctor's registration gate, mcp-fuzz's latency gate, and mcp-reality-check's correctness gate into one call site for a real MCP agent session.","description":"# mcp-trust-check\n\nOne GitHub Action that runs the full MCP trust & safety trilogy — [`mcp-doctor`](https://github.com/vishalhabib99/mcp-doctor), [`mcp-fuzz`](https://github.com/vishalhabib99/mcp-fuzz), [`mcp-reality-check`](https://github.com/vishalhabib99/mcp-reality-check) — against an [MCP](https://modelcontextprotocol.io) server and posts one combined score, instead of three separate installs and three separate reports. Also a Python package (`pip install mcp-trust-check`) doing the same job for a live agent session instead of a CI run — see [Live session wrapper](#live-session-wrapper) below.\n\nEach of the three tools already works standalone and does something the other two structurally can't:\n\n- **mcp-doctor** reads the server's source and checks spec conformance/security/documentation — no server execution needed.\n- **mcp-fuzz** actually launches the server and calls every tool with schema-derived inputs, checking crash resilience, latency, response size, and (opt-in) concurrency and resource-lifecycle correctness.\n- **mcp-reality-check** also launches the server, but checks whether a tool's *successful* response is actually trustworthy — no disguised refusals, no empty content, no output that quietly ignores its own schema.\n\nNone of them use an LLM judge anywhere — every check here is deterministic and reproducible, same as the tools it wraps.\n\n## Demo\n\n35 seconds, live run against the official MCP reference server — real output, no cherry-picking: 86%/B code quality, 100%/A crash resilience, 100%/A output fidelity, 95%/A combined.\n\n<video src=\"docs/demo.mp4\" controls width=\"100%\"></video>\n\n## Use\n\nStatic-only — zero extra config, works on any checked-out repo:\n\n```yaml\n- uses: actions/checkout@v4\n- uses: vishalhabib99/mcp-trust-check@v1\n  with:\n    path: .\n```\n\nFull trilogy — also add `run` with the command that actually starts your server over stdio:\n\n```yaml\n- uses: actions/checkout@v4\n- uses: vishalhabib99/mcp-trust-check@v1\n  with:\n    path: .\n    run…","publisher":null,"homepage":null,"repository":null,"version":"0.4.0","license":null,"protocols":["mcp"],"tags":["mcp"],"pricing":null,"endpoints":[{"url":"pypi:mcp-trust-check","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","summary":"pypi","version":"pypi","description":"pypi"}},"derived":{"capabilities":[{"slug":"dev.docs-lookup","name":"Documentation Lookup","confidence":0.791,"provenance":"derived"}],"categories":["dev"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"mcp-trust-check","registry":"pypi","observedAt":"2026-10-30T20:23:18.291Z","publishedAt":"2026-09-25T16:52:41.447172Z","latestVersion":"0.4.0"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"mcp-trust-check","url":"https://pypi.org/project/mcp-trust-check/","firstSeenAt":"2026-09-18T08:26:39.796Z","fetchedAt":"2026-10-30T20:21:42.443Z","normalizedAt":"2026-10-30T20:21:42.443Z"}]},"firstSeenAt":"2026-09-18T08:26:39.796Z","updatedAt":"2026-10-30T20:23:18.291Z"}