Who should use trustmcp?

trustmcp is an open-source project built for developers and security engineers building or auditing MCP servers.

Yes — trustmcp is open source under the MIT license and free to use.

What platforms does trustmcp run on?

trustmcp runs on the command line. It can also be self-hosted.

Is trustmcp still active?

The GitHub repository shows 6 commits in the last 90 days.

What are alternatives to trustmcp?

Similar projects tracked by PulseGate include mcp-mcts, mcp-security-scan, and mcp-tool-auditor.

Who develops trustmcp?

trustmcp is developed by v0idw4lker.

How long has trustmcp been around?

trustmcp first shipped in 2026.

Back to the index

trustmcp

Name: trustmcp
Author: v0idw4lker

PyPIInfrastructure

trustmcp is an open-source command-line scanner for Model Context Protocol servers. It performs static SAST checks, dynamic live analysis, and authentication-posture assessment, then produces A–F scores and SARIF output for GitHub Security workflows.

Open SourceMITCLISelf-hosted

Visit PyPI

Overview

6 features

trustmcp sits in PulseGate's Security & compliance platforms category. It focuses on assessing MCP server security and authentication posture without manually reviewing code or live behavior. trustmcp is an open-source project aimed at developers and security engineers building or auditing MCP servers. The project is open source (MIT). It ships for the command line, and it can be self-hosted.

v0idw4lker builds and maintains trustmcp, and it first shipped in 2026. The project is developed in the open on GitHub with 6 commits in the last 90 days. Among its 6 catalogued features are static analysis, dynamic scanning, and auth analysis. It exposes integrations via an MCP server.

Summary written by a language model from the project’s public pages.

Static analysis
Dynamic scanning
Auth analysis
A–F scoring
SARIF output
GitHub Security integration

Built with & integrations

Connectors

MCP

Runs on

CLISelf-hosted

Trust & compliance

License

MIT

Verified signals

HTTPSOpen SourceFree tierGitHubActive maintenance

Indexing history

What PulseGate has recorded for this listing

Indexed20 Aug · 20:48 UTC
trustmcp verified against its public source
Source: PulseGate · Open

Frequently asked questions about trustmcp

What does trustmcp do?: Trustmcp focuses on assessing MCP server security and authentication posture without manually reviewing code or live behavior. It is catalogued under Security & compliance platforms on PulseGate.
Who should use trustmcp?: trustmcp is an open-source project built for developers and security engineers building or auditing MCP servers.
Is trustmcp free?: Yes — trustmcp is open source under the MIT license and free to use.
What platforms does trustmcp run on?: trustmcp runs on the command line. It can also be self-hosted.
Is trustmcp still active?: The GitHub repository shows 6 commits in the last 90 days.
What are alternatives to trustmcp?: Similar projects tracked by PulseGate include mcp-mcts, mcp-security-scan, and mcp-tool-auditor.mcp-mcts mcp-security-scan mcp-tool-auditor
Who develops trustmcp?: trustmcp is developed by v0idw4lker.
How long has trustmcp been around?: trustmcp first shipped in 2026.

At a glance

Platforms: Cli
Languages: English
Open source: Yes (GitHub)
License: MIT
First seen: 20 Aug 2026
Built for: developers and security engineers building or auditing MCP servers
Model: Open source
Solves: Assessing MCP server security and authentication posture without manually reviewing code or live behavior.

Registered as

GitHub: v0idw4lker/trustmcp
PyPI: trustmcp

Developer

v0idw4lker

Solo developer

GitHub

Open source

View on GitHub

Stars: 0
Forks: 0
Open issues: 0
Last commit: 20 Aug 2026
Commits 90d: 6
Contributors: 1
Authorship: Solo
Default branch: main

Index record

Identity confidence: Low · 64
Indexed: 20 Aug 2026
Lifecycle: Alive
First seen: Aug 2026
Last seen: 20 Aug 2026

Identity audit (13)

Slug: trustmcp-pypi-org
Lifecycle state recorded: 20 Aug 2026
Verification state: Indexed for public listing
Listing state: Listed: yes
Index status: Included in index
Latest evidence snapshot: 20 Aug 2026
Timeline basis: Indexed-at chronology (no inferred launch/funding milestones).
Name from: Written by a language model from the project's public pages.
Category from: Assigned by a language model.
Summary from: Written by a language model from public pages.
Languages from: Detected by a language model from page content.
Last updated: 20 Aug 2026
Canonical URL: https://pypi.org/project/trustmcp

Ship this? Send a correction — no account, and you get a link to follow it.

Similar projects

Closest matches by what these projects do