Security scanner for MCP (Model Context Protocol) servers — reads the real published npm/PyPI source, not just metadata, to catch tool poisoning, prompt injection, toxic flows & supply-chain risk. Offline, deterministic A–F Trust Score, SARIF + CI gates.
Last commit July 22, 2026, 112 days ago.
89 GitHub stars and 0 Honeystax upvotes. Copy the install, test the workflow, then decide if it earns a permanent slot.
You can test this quickly and remove it cleanly if it misses.
Starts at 6. Added: last commit 112 days ago +14, no security policy +8.
AI Agent
Universal
Model
Multiple
Fastest way to find out if mcptrustchecker belongs in your setup.
Copy the install command, run a real test, and back it out cleanly if it slows you down.
claude mcp add mcptrustchecker -- npx mcptrustcheckerRun this first. You will know quickly if the workflow earns a permanent slot.
claude mcp remove mcptrustcheckerNo messy cleanup loop. If it misses, remove it and keep moving.
Install Location
~/ └─ .claude.json └─ mcp_servers/ └─ mcptrustchecker ← registers here
mcptrustchecker is listed on Honeystax as a MCP Server for Universal, since July 22, 2026. Its code is at github.com/illiahaidar/mcptrustchecker, with 89 GitHub stars and 0 open issues. Last commit July 22, 2026, 112 days ago. GitHub's community health check gives it 100 out of 100.
Source: GitHub repository
Source check: July 23, 2026
Upstream commit: July 22, 2026
Repository state: Not marked archived
Honeystax upvotes are community interest signals, not star ratings. GitHub stars and repository health are source measurements; editorial risk and trial-cost notes are Honeystax analysis.