MCP Server Trust Scoring Tool Released
BaseMac · reddit · 2026-07-15
The author developed a tool called mcp-trustcard, inspired by "npm audit," to provide trust scoring for MCP servers.\n\nChecks Performed\nThe tool runs 8 checks:\n- Installation success\n- Protocol handshake\n- Tool schema validity\n- Presence of dangerous/destructive tools\n- Authentication status\n- Secret leakage\n- Protocol version\n- Latency\n\nResults\nThe author scanned 10 well-known MCP servers, testing them exactly as a real agent would invoke them (npx -y, without arguments/env variables). Results show:\n- 4 out of 10 failed the handshake and timed out because they required additional env/args that clients couldn't discover beforehand\n- server-github is still stuck on an older protocol version\n\nGoals\nThis tool is currently a single-probe, heuristic v1. Its core objective is to establish a public ranking rather than achieve full coverage. The author also suggests adding a mcp.health metadata field to the registry, allowing clients to view the trust card before connecting.
Related event: mcp-trustcard: Security Scoring Tool for MCP Servers(2 posts)→
More from coding & agent
- 250 Builders Hack With Codex at Berlin Community Hackathon Ahead of OpenAI DevDay — paw_lean · 2026-10-26
- Ben Bajarin: Frontier AI is becoming the enterprise cyber-defense stack — BenBajarin · 2026-10-26
- Building AI bots on raw APIs? Devs say models are 'dumb without the harness' — madeofAjala · 2026-10-26
- HarnessMM cuts agent tokens per task by up to 88% while raising success rates — omarsar0 · 2026-10-26
- Microsoft demos intent-classifying agents built with Copilot App and Foundry, deployable across Teams and Outlook — marlene_zw · 2026-10-26
- Looking for a wearable mic with best battery life that feeds recordings to personal agents via MCP — altryne · 2026-10-26