TrustScan

Name: TrustScan
Author: entradox

MCP serverMCP

Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.

by entradoxrepository ↗homepage ↗v0.1.0

Is this yours?

This record is unclaimed

Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.

Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"trustscan","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.

Claim this record

Observed by Wellknown

Evidence

Everything here was measured by our prober or read from a registry. Nothing is self-reported.

30-day availability106/107 checks ok

when	check	result	http	latency	detail
2 h ago	mcp initialize	ok	200	326 ms	server trust-scan 4.0.11 · protocol 2025-06-18 · 4 tools
9 h ago	mcp initialize	ok	200	334 ms	server trust-scan 4.0.11 · protocol 2025-06-18 · 4 tools
16 h ago	mcp initialize	ok	200	343 ms	server trust-scan 4.0.11 · protocol 2025-06-18 · 4 tools
22 h ago	mcp initialize	ok	200	329 ms	server trust-scan 4.0.11 · protocol 2025-06-18 · 4 tools
28 h ago	mcp initialize	ok	200	353 ms	server trust-scan 4.0.11 · protocol 2025-06-18 · 4 tools
35 h ago	mcp initialize	ok	200	324 ms	server trust-scan 4.0.10 · protocol 2025-06-18 · 4 tools
2 d ago	mcp initialize	ok	200	337 ms	server trust-scan 4.0.10 · protocol 2025-06-18 · 4 tools
2 d ago	mcp initialize	ok	200	307 ms	server trust-scan 4.0.10 · protocol 2025-06-18 · 4 tools
2 d ago	mcp initialize	ok	200	341 ms	server trust-scan 4.0.10 · protocol 2025-06-18 · 4 tools
3 d ago	mcp initialize	ok	200	419 ms	server trust-scan 4.0.10 · protocol 2025-06-18 · 4 tools

Tools observed via MCP handshake

trust_scan_server — Security-scan an MCP server or skill package before trusting it. Runs all four checks — invisible Unicode prompt-injection, dangerous code patterns (MCP001–006
trust_scan_file — Security-scan a single file for invisible Unicode, dangerous patterns, and secrets. Returns a severity-weighted score and per-finding detail (rule, severity, l
skills_list_tool — List this product's skills. Each entry carries the SKILL.md URI, its name and description, verbatim frontmatter, and a per-file sha256 manifest. Read a body wit
read_skill — Read a product skill file by its skill:// URI.

Declared by sources

What the publisher says

Attributed to the source that supplied each field. Treated as claims, not facts.

No long description beyond the summary.

kind Official MCP Registry

name Official MCP Registry

repoUrl Official MCP Registry

summary Official MCP Registry

version Official MCP Registry

description Official MCP Registry

homepageUrl Official MCP Registry

publisherName Official MCP Registry

Provenance

Where this record came from

Every source is kept verbatim. Field changes are logged as events.

Official MCP Registryio.github.entradox/trust-scan

first seen 1 mo ago · fetched 3 d agoopen ↗

Field history (7 recent events)

1 mo ago · declared · summary → "Security scanner for MCP servers and skills: Unicode injection, patterns, secrets."
1 mo ago · declared · description → "Security scanner for MCP servers and skills: Unicode injection, patterns, secrets."
1 mo ago · declared · publisherName → "entradox"
1 mo ago · declared · homepageUrl → "https://github.com/entradox/trust-scan"
1 mo ago · declared · repoUrl → "https://github.com/entradox/trust-scan"
1 mo ago · declared · version → "0.1.0"
1 mo ago · declared · protocols → ["mcp"]

This record is unclaimed

Evidence

What the publisher says

Capabilities

Where this record came from