trustmcp
PulseGate's liveness check found it on 3 Oct 2026; it is registered on GitHub and PyPI and has been in the index since 20 Aug 2026. How this is checked
trustmcp is an open-source command-line scanner for Model Context Protocol servers. It performs static SAST checks, dynamic live analysis, and authentication-posture assessment, then produces A–F scores and SARIF output for GitHub Security workflows.
Inferred · not functionally tested
Overview
6 featuresPurpose: Assessing MCP server security and authentication posture without manually reviewing code or live behavior.
Inferred · not functionally tested
Audience: developers and security engineers building or auditing MCP servers
Inferred · not functionally tested
Functions: monitoring, data_extraction
Inferred · not functionally tested
Interfaces: API: unknown · MCP: indicated (inferred, not tested) · CLI: indicated (inferred, not tested) · Self-hosting: indicated (inferred, not tested)
Recorded constraints: pricing: open_source · license: MIT · platforms: CLI · deployment: cli, self_hosted
Constraint provenance is unknown; confirm requirements with the publisher.
Record sources: pypi.org · github.com. These links do not verify the individual claims.
trustmcp sits in PulseGate's Application security & vulnerability scanning category. Inferred · not functionally tested: It focuses on assessing MCP server security and authentication posture without manually reviewing code or live behavior. Inferred · not functionally tested: trustmcp is an open-source project aimed at developers and security engineers building or auditing MCP servers. Basis unknown · not verified: The project is open source (MIT). Basis unknown · not verified: It ships for the command line, and it can be self-hosted.
v0idw4lker builds and maintains trustmcp, and it first shipped in 2026. The project is developed in the open on GitHub with 6 commits in the last 90 days. Inferred · not functionally tested: Among its 6 catalogued features are static analysis, dynamic scanning, and auth analysis. Basis unknown · not verified: Catalogued interfaces include an MCP server.
Summary written by a language model from the project’s public pages.
Tasks: Inferred · not functionally tested
- Static analysis
- Dynamic scanning
- Auth analysis
- A–F scoring
- SARIF output
- GitHub Security integration
Topics: Inferred · not functionally tested
Built with & integrations
Trust & compliance
Indexing history
1What PulseGate has recorded for this listing
Frequently asked questions about trustmcp
- What does trustmcp do?
- Inferred · not functionally tested: Trustmcp focuses on assessing MCP server security and authentication posture without manually reviewing code or live behavior. It is catalogued under Application security & vulnerability scanning on PulseGate.
- Who should use trustmcp?
- Inferred · not functionally tested: trustmcp is an open-source project built for developers and security engineers building or auditing MCP servers.
- Is trustmcp free?
- Basis unknown · not verified: Yes — trustmcp is open source under the MIT license and free to use.
- What platforms does trustmcp run on?
- Basis unknown · not verified: trustmcp runs on the command line. It can also be self-hosted.
- Is trustmcp still active?
- PulseGate's liveness check found it on 3 Oct 2026. Its GitHub repository shows 6 commits in the last 90 days.
- What are alternatives to trustmcp?
- Similar projects tracked by PulseGate include mcp-mcts, mcp-triage, and mcp-security-scan.mcp-mctsmcp-triagemcp-security-scan
- Who develops trustmcp?
- trustmcp is developed by v0idw4lker.
- How long has trustmcp been around?
- trustmcp first shipped in 2026.
Similar projects
Closest matches by what these projects do