MCP Trust Layer 🔒

The first security scanner and trust verification layer for the MCP ecosystem.

MCP (Model Context Protocol) is how AI agents connect to tools and data. With 21,000+ MCP servers on GitHub and enterprise deployments accelerating in 2026, there is zero security verification in the ecosystem.

MCP Trust Layer fixes that.

Why This Exists

Every MCP server you install gets:

• Read access to ~/.ssh/id_rsa, ~/.aws/credentials
• Network access (exfiltrate data, SSRF)
• Process spawn access (run commands)
• Environment variable access (API keys)

Not a single MCP marketplace audits for security. One researcher found 3 of 8,764 servers leaked credentials under basic testing.

Features

• Scan any PyPI package for secrets, dangerous patterns, and prompt injection vectors
• Scan any GitHub repo or source URL for security issues
• Compare packages side-by-side by security score
• Trust Score (0-10) — automated, reproducible security rating
• Deep code analysis across all Python files in a package

Quick Start

Install

pip install "mcp[cli]"
git clone https://github.com/YOUR_USERNAME/mcp-trust-layer.git
cd mcp-trust-layer

Run (stdio)

python -m mcp run server.py --transport stdio

Run (HTTP)

python server.py
# Server starts on http://127.0.0.1:8000
# Connect any MCP client to http://localhost:8000/mcp

Add to Claude Code

claude mcp add --transport http mcp-trust http://localhost:8000/mcp

Then ask:

• "Scan the PyPI package 'flask' for security issues"
• "Compare the security scores of 'requests' and 'httpx'"
• "Scan github.com/owner/repo for vulnerabilities"

Tools

Tool	Description
scan_pypi_package(name)	Deep scan of a PyPI package. Downloads source, analyzes all Python files for secrets, dangerous patterns, and prompt injection vectors. Returns trust score + findings.
scan_source_url(url)	Scan code from a GitHub repo or direct archive URL.
compare_packages(list)	Compare multiple packages by security score side by side.

Resources

URI	Description
trust://schema	JSON schema for security reports

Architecture

┌─────────────┐     ┌──────────────┐     ┌─────────────┐
│  MCP Client  │────▶│ Trust Scanner│────▶│  PyPI / GH  │
│ (Claude/Copilot)│     │  MCP Server  │     │  API        │
└─────────────┘     └──────────────┘     └─────────────┘
                           │
                           ▼
                    ┌──────────────┐
                    │  Trust Score  │
                    │  + Findings   │
                    └──────────────┘

Security Checks

The scanner detects:

• Secrets: API keys, tokens, passwords, private keys, connection strings
• Dangerous patterns: eval(), exec(), subprocess, file writes, network access
• Supply chain risks: dangerous imports, pickle deserialization, dynamic imports
• Prompt injection vectors: system prompt references, injection patterns

Roadmap

• [x] PyPI package scanning
• [x] GitHub repo scanning
• [x] Security score (0-10)
• [ ] Live MCP server endpoint monitoring
• [ ] Continuous integration webhook alerts
• [ ] Enterprise compliance reports (SOC2, HIPAA)
• [ ] MCP marketplace integration API

Marketplaces

This server is listed on:

• mcp.so — Largest MCP directory
• Smithery — CLI-first MCP installer
• PulseMCP — Community MCP index
• Glama — Quality-scored MCP directory

License

MIT