Scans MCP servers for prompt injection, data exfiltration, and privilege escalation.
Scans MCP servers for prompt injection, data exfiltration, and privilege escalation.
Static security scanner for MCP tool definitions
Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| tooltrust_scan_config | Scan all MCP servers in your .mcp.json or ~/.claude.json |
| tooltrust_scan_server | Launch and scan a specific MCP server by command |
| tooltrust_scanner_scan | Scan a raw JSON blob of tool definitions |
| tooltrust_lookup | Look up a server's trust grade from the ToolTrust Directory |
| tooltrust_list_rules | List all built-in security rules |
{
"mcpServers": {
"tooltrust": {
"command": "npx",
"args": ["-y", "tooltrust-mcp"]
}
}
}Configuration as documented by the project. Restart the client after saving.
Read, search and edit files inside allowed directories with the Model Context Protocol reference Filesystem server.
Search and read your Drive — Docs, Sheets and files become context your assistant can actually use.
Query, modify and analyse local SQLite databases in conversation — the fastest way to chat with a data file.
Build a programmable telecommunications stack for connecting telephony services with the Internet via a cloud-based utility.
Chat with your second brain — search, read and write vault notes through the Local REST API.
Manage Proxmox hypervisors through a Model Context Protocol server, providing a clean interface for nodes, VMs, and containers.