AgentSafe-AI/tooltrust-scanner

github
github Go analyzed 9ef1ed4

Security scanner for AI agent tool definitions

maintainer
AgentSafe-AI
licence
MIT
first seen
2026-06-03
last seen
2026-10-14
releases · 30d
0
github stars
19 reported
short id

AgentSafe-AI/tooltrust-scanner is an MCP server distributed on github, maintained by AgentSafe-AI, tracked here since June 2026. It has shipped 35 releases and exposes 5 tools. Tools include tooltrust_list_rules, tooltrust_lookup, tooltrust_scan_config, tooltrust_scan_server, tooltrust_scanner_scan. Its composite risk grade is A — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised one review prompt — purpose mismatch — each a pattern worth a human look rather than a finding of fault.

Its 5 tools appear to reach filesystem and shell / exec, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →

tools

5
  • tooltrust_list_rules List all built-in security rules
  • tooltrust_lookup Look up a server's trust grade from the ToolTrust Directory
  • tooltrust_scan_config Scan all MCP servers in your .mcp.json or ~/.claude.json
  • tooltrust_scan_server Launch and scan a specific MCP server by command
  • tooltrust_scanner_scan Scan a raw JSON blob of tool definitions

release cadence · 90d

0 releases

No releases yet.

recent releases

last 10
version date src
v0.3.19 2026-06-21 github
v0.3.18 2026-06-16 github
v0.3.17 2026-06-15 github
v0.3.16 2026-06-15 github
v0.3.15 2026-06-15 github
v0.3.13 2026-05-29 github
v0.3.12 2026-05-17 github
v0.3.11 2026-05-16 github
v0.3.10 2026-05-16 github
v0.3.9 2026-04-26 github

view all →