Head to head
MCP vs Pkgtruth
Same numbers we show everywhere else, lined up. Ratings come from users, the grade comes from our scanner, adoption comes from public registries.
Pkgtruth
Aio.github.hxckya/pkgtruthNo reviews yet
Catches hallucinated and slopsquatted npm and PyPI packages before an agent installs them.
Full listingThe short version
Neither has been reviewed yet, so the comparison rests on the scan and the public usage numbers. The safety scan favours MCP (99/100 against 89). MCP is hosted and callable through the gateway; Pkgtruth runs on your own machine. MCP has noticeably more public adoption.
| MCP | Pkgtruth | |
|---|---|---|
| User rating | No reviews yet | No reviews yet |
| Safety grade | A99/100 | A89/100 |
| Adoption | Established | Growing |
| GitHub stars | 533 | 4 |
| Downloads / week | 297 | 77 |
| Runs where | Hosted (remote) | Your machine (local) |
| Gateway-ready | Yes | No |
| Tools | — | 3 |
| Write actions | — | — |
| Price per call | Free | Free |
| Licence | Apache-2.0 | MIT |
| Last release | 2026-09-19 | 2026-09-14 |
| Category | AI and agents | AI and agents |