← All MCP servers
MCP server
ToolTrust Scanner
mcp:agentsafe-ai/tooltrust-scanner
Scans MCP servers for prompt injection, data exfiltration, and privilege escalation.
Verdict
Not analyzed
Indexed from the registries, but not analyzed yet. Lineage and listings below are current.
Execution chain 69
What it calls, runs, installs, reads and writes, with the line that does it.
Environment variables 2
TOOLTRUST_CACHE_DIR
npm/bin/run.js:77 · read
VERSION
install.sh:11 · read
Commands run 2
<dynamic>
npm/bin/run.js:61 · process
RELEASE_TAG=$(curl -sf "https://api.github.com/repos/$REPO/releases/latest" | grep '"tag_name":' | sed -E 's/.*"([^"]+)".*/\1/')
install.sh:15 · dynamic_code
Files written 2
<dynamic>
npm/bin/run.js:44 · write
$TARGET_FILE
install.sh:81 · write
GitHub repositories 6
agentsafe-ai/tooltrust-directory
agentsafe-ai/tooltrust-scanner
aquasecurity/trivy
aquasecurity/trivy-action
axios/axios
owner/repo
Host config written 2
.claude.json
cmd/tooltrust-mcp/main.go:520 · literal
.mcp.json
cmd/tooltrust-mcp/main.go:509 · literal
Network calls 7
<dynamic>
npm/bin/run.js:36 · call
api.github.com
install.sh:15 · url
api.osv.dev
pkg/analyzer/supply_chain.go:25 · url_literal
github.com
Formula/tooltrust-scanner.rb:11 · url_literal
huggingface.co
pkg/deepscan/manager.go:25 · url_literal
raw.githubusercontent.com
cmd/tooltrust-mcp/main.go:281 · url_literal
registry.npmjs.org
pkg/analyzer/npm_scripts.go:16 · url_literal
Packages 1
npm:tooltrust-mcp@1.1.13
server.json:14 · launch:server.json
URLs 47
https://api.github.com/repos/$REPO/releases/latest
https://api.osv.dev/v1/query
https://github.com/$REPO/releases/download/$RELEASE_TAG/$BINARY_NAME
https://github.com/$REPO/releases/download/$RELEASE_TAG/checksums_$
https://github.com/advisories/GHSA-g7cv-rxg3-hmpx
https://github.com/advisories/GHSA-rvqx-wpfh-mfx7
https://github.com/AgentSafe-AI/tooltrust-directory
https://github.com/AgentSafe-AI/tooltrust-directory/issues/new?template=SCAN_REQUEST.md
https://github.com/AgentSafe-AI/tooltrust-scanner
https://github.com/AgentSafe-AI/tooltrust-scanner.git
https://github.com/AgentSafe-AI/tooltrust-scanner/archive/refs/tags/v#
https://github.com/AgentSafe-AI/tooltrust-scanner/archive/refs/tags/vX.Y.Z.tar.gz
https://github.com/AgentSafe-AI/tooltrust-scanner/blob/main/pkg/analyzer/data/blacklist.json
https://github.com/AgentSafe-AI/tooltrust-scanner/blob/main/pkg/analyzer/npm_scripts.go
https://github.com/AgentSafe-AI/tooltrust-scanner/releases/download/$
https://github.com/AgentSafe-AI/tooltrust-scanner/releases/latest/download/tooltrust-scanner_$
https://github.com/aquasecurity/trivy-action/security/advisories
https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23
https://github.com/axios/axios
https://github.com/owner/repo
https://glama.ai/mcp/schemas/server.json
https://huggingface.co/Xenova/all-MiniLM-L6-v2/resolve/main/onnx/model_quantized.onnx
https://huggingface.co/Xenova/all-MiniLM-L6-v2/resolve/main/tokenizer.json
https://litter.catbox.moe/7rrc6l.mjs
https://litter.catbox.moe/h8nc9u.js
https://osv.dev/vulnerability/GHSA-pvw4-cvr4-97p8
https://osv.dev/vulnerability/MAL-2026-5320
https://osv.dev/vulnerability/MAL-2026-5326
https://osv.dev/vulnerability/MAL-2026-5717
https://osv.dev/vulnerability/MAL-2026-5789
https://osv.dev/vulnerability/MAL-2026-5893
https://osv.dev/vulnerability/MAL-2026-5955
https://osv.dev/vulnerability/MAL-2026-5956
https://osv.dev/vulnerability/MAL-2026-6006
https://osv.dev/vulnerability/MAL-2026-6027
https://osv.dev/vulnerability/MAL-2026-6048
https://osv.dev/vulnerability/MAL-2026-6049
https://osv.dev/vulnerability/MAL-2026-6232
https://raw.githubusercontent.com/AgentSafe-AI/tooltrust-directory/main/data/reports/%s.json
https://raw.githubusercontent.com/AgentSafe-AI/tooltrust-scanner/main/Formula/tooltrust-scanner.rb
https://registry.npmjs.org
https://security.snyk.io/vuln/SNYK-PYTHON-LITELLM-15762713
https://socket.dev/blog/tanstack-npm-packages-compromised-mini-shai-hulud-supply-chain-attack
https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json
https://thehackernews.com/2026/04/bitwarden-cli-supply-chain-attack.html
https://thehackernews.com/2026/05/tanstack-supply-chain-attack-hits-two.html
https://www.tooltrust.dev/
Linked repositories 5
GitHub repositories it links to or installs from, and whether their names can be taken over.
agentsafe-ai/tooltrust-directory
url · not tracked
aquasecurity/trivy
url · not tracked
aquasecurity/trivy-action
url · not tracked
axios/axios
url · no ownership changes
owner/repo
url · not tracked