Every MCP tool your agent calls is an attack surface — prompt injection, data exfiltration, privilege escalation, supply-chain backdoors. ToolTrust scans tool definitions before your agent trusts…
Tooltrust Scanner is an MCP project maintained in the agentsafe-ai/tooltrust-scanner repository. The maintainer describes its purpose as “Every MCP tool your agent calls is an attack surface — prompt injection, data exfiltration, privilege escalation, supply-chain backdoors. ToolTrust scans tool definitions before your…”. Read the project documentation for the complete scope.
The documented npm package is tooltrust-mcp. The configuration below comes from the maintainer’s example; adapt its paths and account values to your environment.
Project documentation · Repository · Discovery listing. This profile records the public documentation checked on 2026-10-08.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| tooltrust_scan_config | Scan all MCP servers in your .mcp.json or ~/.claude.json |
| tooltrust_scan_server | Launch and scan a specific MCP server by command |
| tooltrust_scanner_scan | Scan a raw JSON blob of tool definitions |
| tooltrust_lookup | Look up a server's trust grade from the ToolTrust Directory |
| tooltrust_list_rules | List all built-in security rules |
{
"mcpServers": {
"tooltrust": {
"command": "npx",
"args": [
"-y",
"tooltrust-mcp"
]
}
}
}From the project documentation. Replace placeholders and example paths before connecting.
Invoices, payments and disputes through PayPal's official server — commerce operations by conversation.
Exposes the entire Notion API as a collection of tools that Large Language Models (LLMs) can use to interact with Notion seamlessly.
Taiwan parcel forwarding tools: freight and import-tax quotes, CCC tariff lookup, import rules.
3D bin packing for freight in Claude & ChatGPT: cartons and pallets, the fit, a 3D plan in the chat.
12 synthetic freight bill exception cases: duplicate payments, policy-watch list entries, missing ra
12 synthetic freight bill exception cases: duplicate payments, policy-watch list entries, missing ra