{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_4g9qms5qmstv","handle":"trustscan","url":"https://wellknown.network/agents/trustscan","links":{"self":"https://wellknown.network/agents/trustscan/record.json","html":"https://wellknown.network/agents/trustscan","markdown":"https://wellknown.network/agents/trustscan/record.md","api":"https://wellknown.network/api/v1/agents/trustscan","status":"https://wellknown.network/api/v1/agents/trustscan/status","claim":"https://wellknown.network/agents/trustscan/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/trustscan/claim.json","badge":"https://wellknown.network/agents/trustscan/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/trustscan/history","tools":"https://wellknown.network/api/v1/agents/trustscan/tools"},"ard":{"identifier":"urn:air:trust-scan-production.up.railway.app:server:trustscan","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"TrustScan","summary":"Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.","description":"Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.","publisher":{"name":"entradox","url":null},"homepage":"https://github.com/entradox/trust-scan","repository":"https://github.com/entradox/trust-scan","version":"0.1.0","license":null,"protocols":["mcp"],"tags":[],"pricing":null,"endpoints":[{"url":"https://trust-scan-production.up.railway.app/mcp","type":"mcp_streamable_http","auth":null,"probeable":true}],"skills":null,"tools":null,"extra":{"updatedAt":"2026-09-07T05:56:39.61152Z","publishedAt":"2026-09-07T05:56:39.61152Z","registryName":"io.github.entradox/trust-scan"},"attribution":{"kind":"mcp_registry","name":"mcp_registry","repoUrl":"mcp_registry","summary":"mcp_registry","version":"mcp_registry","description":"mcp_registry","homepageUrl":"mcp_registry","publisherName":"mcp_registry"}},"derived":{"capabilities":[{"slug":"security.scanning","name":"Security Scanning","confidence":0.984,"provenance":"derived"},{"slug":"security.secrets","name":"Secrets Management","confidence":0.911,"provenance":"derived"},{"slug":"code.security-review","name":"Security Review","confidence":0.583,"provenance":"derived"},{"slug":"dev.package-management","name":"Packages & Dependencies","confidence":0.51,"provenance":"derived"}],"categories":["code","dev","security"],"language":"en"},"observed":{"status":"live","statusReason":"Responded 36m ago.","lastOkAt":"2026-10-10T04:32:36.161Z","lastProbedAt":"2026-10-10T04:32:36.161Z","statusComputedAt":"2026-10-10T04:33:37.401Z","reliability30d":{"probes":108,"successRate":0.9907,"p50Ms":337,"basis":"service","measures":{"availability":"availability","latency":"response time","tools":"tool surface observed","summary":"Checks reached the service itself."},"checks":{"total":107,"ok":106,"authBoundaryOk":0,"serviceOk":106,"note":"Counted from the observation rows for the window, checks of the server only (HTTP, A2A card, MCP initialize). ok = authBoundaryOk + serviceOk. `probes` is the sum of daily rollups and includes registry checks, so it can differ from `total`."}},"latestObservations":[{"at":"2026-10-10T04:32:36.161Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":314,"error":null,"detail":{"tools":[{"name":"trust_scan_server","description":"Security-scan an MCP server or skill package before trusting it.\n\nRuns all four checks — invisible Unicode prompt-injection, dangerous code\npatterns (MCP001–006"},{"name":"trust_scan_file","description":"Security-scan a single file for invisible Unicode, dangerous patterns, and secrets.\n\nReturns a severity-weighted score and per-finding detail (rule, severity,\nl"},{"name":"skills_list_tool","description":"List this product's skills. Each entry carries the SKILL.md URI,\nits name and description, verbatim frontmatter, and a per-file\nsha256 manifest. Read a body wit"},{"name":"read_skill","description":"Read a product skill file by its skill:// URI."}],"toolCount":4,"toolsHash":"301b8f8fb84b147198674e956e65e46fd6f620070fc633fcdabbc9607027a898","serverName":"trust-scan","capabilities":["logging","prompts","resources","tools"],"serverVersion":"4.0.11","protocolVersion":"2025-06-18"}},{"at":"2026-10-09T22:26:54.021Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":326,"error":null,"detail":{"tools":[{"name":"trust_scan_server","description":"Security-scan an MCP server or skill package before trusting it.\n\nRuns all four checks — invisible Unicode prompt-injection, dangerous code\npatterns (MCP001–006"},{"name":"trust_scan_file","description":"Security-scan a single file for invisible Unicode, dangerous patterns, and secrets.\n\nReturns a severity-weighted score and per-finding detail (rule, severity,\nl"},{"name":"skills_list_tool","description":"List this product's skills. Each entry carries the SKILL.md URI,\nits name and description, verbatim frontmatter, and a per-file\nsha256 manifest. Read a body wit"},{"name":"read_skill","description":"Read a product skill file by its skill:// URI."}],"toolCount":4,"toolsHash":"301b8f8fb84b147198674e956e65e46fd6f620070fc633fcdabbc9607027a898","serverName":"trust-scan","capabilities":["logging","prompts","resources","tools"],"serverVersion":"4.0.11","protocolVersion":"2025-06-18"}},{"at":"2026-10-09T15:31:18.251Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":334,"error":null,"detail":{"tools":[{"name":"trust_scan_server","description":"Security-scan an MCP server or skill package before trusting it.\n\nRuns all four checks — invisible Unicode prompt-injection, dangerous code\npatterns (MCP001–006"},{"name":"trust_scan_file","description":"Security-scan a single file for invisible Unicode, dangerous patterns, and secrets.\n\nReturns a severity-weighted score and per-finding detail (rule, severity,\nl"},{"name":"skills_list_tool","description":"List this product's skills. Each entry carries the SKILL.md URI,\nits name and description, verbatim frontmatter, and a per-file\nsha256 manifest. Read a body wit"},{"name":"read_skill","description":"Read a product skill file by its skill:// URI."}],"toolCount":4,"toolsHash":"301b8f8fb84b147198674e956e65e46fd6f620070fc633fcdabbc9607027a898","serverName":"trust-scan","capabilities":["logging","prompts","resources","tools"],"serverVersion":"4.0.11","protocolVersion":"2025-06-18"}},{"at":"2026-10-09T08:28:53.030Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":343,"error":null,"detail":{"tools":[{"name":"trust_scan_server","description":"Security-scan an MCP server or skill package before trusting it.\n\nRuns all four checks — invisible Unicode prompt-injection, dangerous code\npatterns (MCP001–006"},{"name":"trust_scan_file","description":"Security-scan a single file for invisible Unicode, dangerous patterns, and secrets.\n\nReturns a severity-weighted score and per-finding detail (rule, severity,\nl"},{"name":"skills_list_tool","description":"List this product's skills. Each entry carries the SKILL.md URI,\nits name and description, verbatim frontmatter, and a per-file\nsha256 manifest. Read a body wit"},{"name":"read_skill","description":"Read a product skill file by its skill:// URI."}],"toolCount":4,"toolsHash":"301b8f8fb84b147198674e956e65e46fd6f620070fc633fcdabbc9607027a898","serverName":"trust-scan","capabilities":["logging","prompts","resources","tools"],"serverVersion":"4.0.11","protocolVersion":"2025-06-18"}},{"at":"2026-10-09T02:27:17.902Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":329,"error":null,"detail":{"tools":[{"name":"trust_scan_server","description":"Security-scan an MCP server or skill package before trusting it.\n\nRuns all four checks — invisible Unicode prompt-injection, dangerous code\npatterns (MCP001–006"},{"name":"trust_scan_file","description":"Security-scan a single file for invisible Unicode, dangerous patterns, and secrets.\n\nReturns a severity-weighted score and per-finding detail (rule, severity,\nl"},{"name":"skills_list_tool","description":"List this product's skills. Each entry carries the SKILL.md URI,\nits name and description, verbatim frontmatter, and a per-file\nsha256 manifest. Read a body wit"},{"name":"read_skill","description":"Read a product skill file by its skill:// URI."}],"toolCount":4,"toolsHash":"301b8f8fb84b147198674e956e65e46fd6f620070fc633fcdabbc9607027a898","serverName":"trust-scan","capabilities":["logging","prompts","resources","tools"],"serverVersion":"4.0.11","protocolVersion":"2025-06-18"}},{"at":"2026-10-08T20:23:49.185Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":353,"error":null,"detail":{"tools":[{"name":"trust_scan_server","description":"Security-scan an MCP server or skill package before trusting it.\n\nRuns all four checks — invisible Unicode prompt-injection, dangerous code\npatterns (MCP001–006"},{"name":"trust_scan_file","description":"Security-scan a single file for invisible Unicode, dangerous patterns, and secrets.\n\nReturns a severity-weighted score and per-finding detail (rule, severity,\nl"},{"name":"skills_list_tool","description":"List this product's skills. Each entry carries the SKILL.md URI,\nits name and description, verbatim frontmatter, and a per-file\nsha256 manifest. Read a body wit"},{"name":"read_skill","description":"Read a product skill file by its skill:// URI."}],"toolCount":4,"toolsHash":"301b8f8fb84b147198674e956e65e46fd6f620070fc633fcdabbc9607027a898","serverName":"trust-scan","capabilities":["logging","prompts","resources","tools"],"serverVersion":"4.0.11","protocolVersion":"2025-06-18"}},{"at":"2026-10-08T13:22:36.169Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":324,"error":null,"detail":{"tools":[{"name":"trust_scan_server","description":"Security-scan an MCP server or skill package before trusting it.\n\nRuns all four checks — invisible Unicode prompt-injection, dangerous code\npatterns (MCP001–006"},{"name":"trust_scan_file","description":"Security-scan a single file for invisible Unicode, dangerous patterns, and secrets.\n\nReturns a severity-weighted score and per-finding detail (rule, severity,\nl"},{"name":"skills_list_tool","description":"List this product's skills. Each entry carries the SKILL.md URI,\nits name and description, verbatim frontmatter, and a per-file\nsha256 manifest. Read a body wit"},{"name":"read_skill","description":"Read a product skill file by its skill:// URI."}],"toolCount":4,"toolsHash":"301b8f8fb84b147198674e956e65e46fd6f620070fc633fcdabbc9607027a898","serverName":"trust-scan","capabilities":["logging","prompts","resources","tools"],"serverVersion":"4.0.10","protocolVersion":"2025-06-18"}},{"at":"2026-10-08T07:24:49.187Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":337,"error":null,"detail":{"tools":[{"name":"trust_scan_server","description":"Security-scan an MCP server or skill package before trusting it.\n\nRuns all four checks — invisible Unicode prompt-injection, dangerous code\npatterns (MCP001–006"},{"name":"trust_scan_file","description":"Security-scan a single file for invisible Unicode, dangerous patterns, and secrets.\n\nReturns a severity-weighted score and per-finding detail (rule, severity,\nl"},{"name":"skills_list_tool","description":"List this product's skills. Each entry carries the SKILL.md URI,\nits name and description, verbatim frontmatter, and a per-file\nsha256 manifest. Read a body wit"},{"name":"read_skill","description":"Read a product skill file by its skill:// URI."}],"toolCount":4,"toolsHash":"301b8f8fb84b147198674e956e65e46fd6f620070fc633fcdabbc9607027a898","serverName":"trust-scan","capabilities":["logging","prompts","resources","tools"],"serverVersion":"4.0.10","protocolVersion":"2025-06-18"}},{"at":"2026-10-08T00:26:57.964Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":307,"error":null,"detail":{"tools":[{"name":"trust_scan_server","description":"Security-scan an MCP server or skill package before trusting it.\n\nRuns all four checks — invisible Unicode prompt-injection, dangerous code\npatterns (MCP001–006"},{"name":"trust_scan_file","description":"Security-scan a single file for invisible Unicode, dangerous patterns, and secrets.\n\nReturns a severity-weighted score and per-finding detail (rule, severity,\nl"},{"name":"skills_list_tool","description":"List this product's skills. Each entry carries the SKILL.md URI,\nits name and description, verbatim frontmatter, and a per-file\nsha256 manifest. Read a body wit"},{"name":"read_skill","description":"Read a product skill file by its skill:// URI."}],"toolCount":4,"toolsHash":"301b8f8fb84b147198674e956e65e46fd6f620070fc633fcdabbc9607027a898","serverName":"trust-scan","capabilities":["logging","prompts","resources","tools"],"serverVersion":"4.0.10","protocolVersion":"2025-06-18"}},{"at":"2026-10-07T18:26:05.674Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":341,"error":null,"detail":{"tools":[{"name":"trust_scan_server","description":"Security-scan an MCP server or skill package before trusting it.\n\nRuns all four checks — invisible Unicode prompt-injection, dangerous code\npatterns (MCP001–006"},{"name":"trust_scan_file","description":"Security-scan a single file for invisible Unicode, dangerous patterns, and secrets.\n\nReturns a severity-weighted score and per-finding detail (rule, severity,\nl"},{"name":"skills_list_tool","description":"List this product's skills. Each entry carries the SKILL.md URI,\nits name and description, verbatim frontmatter, and a per-file\nsha256 manifest. Read a body wit"},{"name":"read_skill","description":"Read a product skill file by its skill:// URI."}],"toolCount":4,"toolsHash":"301b8f8fb84b147198674e956e65e46fd6f620070fc633fcdabbc9607027a898","serverName":"trust-scan","capabilities":["logging","prompts","resources","tools"],"serverVersion":"4.0.10","protocolVersion":"2025-06-18"}}],"tools":[{"name":"trust_scan_server","description":"Security-scan an MCP server or skill package before trusting it.\n\nRuns all four checks — invisible Unicode prompt-injection, dangerous code\npatterns (MCP001–006"},{"name":"trust_scan_file","description":"Security-scan a single file for invisible Unicode, dangerous patterns, and secrets.\n\nReturns a severity-weighted score and per-finding detail (rule, severity,\nl"},{"name":"skills_list_tool","description":"List this product's skills. Each entry carries the SKILL.md URI,\nits name and description, verbatim frontmatter, and a per-file\nsha256 manifest. Read a body wit"},{"name":"read_skill","description":"Read a product skill file by its skill:// URI."}],"package":null,"toolSurface":{"id":"ts_3chdekz2s2nu","endpointId":"ep_8hrshmzjv8cg","hash":"301b8f8fb84b147198674e956e65e46fd6f620070fc633fcdabbc9607027a898","toolCount":4,"serverName":"trust-scan","serverVersion":"4.0.3","protocolVersion":"2025-06-18","firstSeenAt":"2026-09-15T02:20:19.246Z","lastSeenAt":"2026-10-10T04:32:36.174Z","observations":90,"toolNames":["trust_scan_server","trust_scan_file","skills_list_tool","read_skill"],"distinctSurfaces":2},"endpointFacts":[{"id":"ep_8hrshmzjv8cg","url":"https://trust-scan-production.up.railway.app/mcp","type":"mcp_streamable_http","factsCheckedAt":"2026-10-09T15:31:18.251Z","auth":{"observedAt":"2026-10-09T15:31:18.413Z","authRequired":false,"scheme":null,"resourceMetadata":null,"authorizationServer":null,"conformance":{"dpop":false,"rfc8414":false,"rfc9728":false,"pkceS256":false,"clientIdMetadataDocument":false,"dynamicClientRegistration":false}},"tls":{"observedAt":"2026-10-09T15:31:18.420Z","protocol":"TLSv1.3","chainValid":true,"chainError":null,"hostMatches":true,"subject":"*.up.railway.app","issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validFrom":"2026-09-27T03:01:43.000Z","validTo":"2026-12-26T03:01:42.000Z","daysToExpiry":76,"sanCount":2,"fingerprint256":"FB:37:0C:A2:68:42:DA:2B:2F:F8:E3:18:2E:0E:8C:FC:6F:B8:EA:C3:2C:DB:57:18:F4:5A:4B:39:B9:E1:40:AF"}}]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"mcp_registry","key":"io.github.entradox/trust-scan","url":"https://registry.modelcontextprotocol.io/v0/servers/io.github.entradox%2Ftrust-scan","firstSeenAt":"2026-09-08T12:21:33.601Z","fetchedAt":"2026-10-07T10:41:37.659Z","normalizedAt":"2026-10-07T10:41:37.659Z"}]},"firstSeenAt":"2026-09-08T12:21:33.601Z","updatedAt":"2026-10-10T04:34:43.351Z"}