illiahaidar/MCP Trust Checker — MCP Security Scan
Scan a Model Context Protocol server for security issues and gate CI on its Trust Score.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| target | What to scan: a tools.json manifest, an http(s) URL, a client config, or a package name. | yes | — |
| min-grade | Fail if the grade is worse than this (A–F). | no | — |
| fail-under | Fail if the Trust Score is below this (0–100). | no | — |
| sarif | Produce a SARIF file and upload it to the Security tab. | no | false |
| config | Path to a mcptrustchecker.config.json. | no | — |
| extra-args | Additional raw CLI arguments (e.g. "--online --include-builtins"). | no | "" |
| version | MCP Trust Checker version to run (npm dist-tag or version). | no | latest |
Outputs
no outputs