MCP.Market

TrustBench MCP server

online · 100% uptime
by lithvall·io.github.lithvall/trustbench·v1.1.1

x402 provider rankings + Ed25519-signed payment receipts + signature verification (3 tools).

A93/100grade A
What users say
No reviews yet
Be the first
Safety scan
A93/100

full report

Adoption
New

0 stars

Reviews

Write one

Nobody has reviewed TrustBench yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

TrustBench tools (3)

write = sends, deletes, buys or posts
  • get_rankingsFree

    Get TrustBench liveness rankings for x402 providers by capability. Returns a scored list of providers with latency and success-rate telemetry. Methodology note: scores are derived from HEAD-probe liveness checks (3 samples from one host), not a rigorous benchmark. See trustbench.io/methodology. Output: returns a JSON array. Each object has name (string, provider name), score (number 0-100, composite liveness score), latency_p50 (number, ms), success_rate (number 0.0-1.0, last 7 days), endpoint (string, URL), capabilities (array of strings).

  • get_receiptFree

    Fetch a TrustBench routing receipt by ID. Receipts are immutable, Ed25519-signed records of a routing or payment event. Use to verify what was paid, to whom, for what capability, and what the on-chain settlement reference is. IDs start with rcpt_ (Phase 3) or rrcpt_ (Phase 4). Output: returns the signed receipt envelope as JSON. Phase 3 (rcpt_) returns a SignedReceipt with receipt (call metadata + settlement ref) and signature (Ed25519 over JCS-canonicalized receipt body). Phase 4 (rrcpt_) returns {receipt, signature} where receipt.paid contains routing details and signature covers the canonical envelope. To verify an envelope offline use the verify_receipt tool with the returned JSON, or @trustbench/verify-receipt npm.

  • verify_receiptFree

    Verify the Ed25519 signature on a TrustBench receipt. Two modes: (1) Lookup mode — pass receipt_id and the server fetches the receipt from trustbench.io and re-runs verification (handy when you only have an ID). (2) Offline mode — pass receipt_json (the full {receipt, signature} envelope an agent received from a third party) and the server verifies the Ed25519 signature against the published public key at trustbench.io/.well-known/trustbench-pubkey without trusting the database. Exactly one of receipt_id or receipt_json must be provided. Output: returns JSON with receipt_id, signature_valid (boolean), on_chain_verified (boolean, where present), signature_alg ("ed25519"), verify_url, pubkey_url. For non-server-mediated verification with no network round-trip, use the @trustbench/verify-receipt npm package.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • Code scan3 source files scanned25/25
  • Live reliabilityremote reachable in 637ms20/20
  • Tool poisoning3 tool descriptions checked15/15
  • Auth qualityopen endpoint, read-only tools10/15
  • Maintenancelast push 1 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 93/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How TrustBench compares

Against every graded Finance MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
93/100
higher than 96% of 1,761 Finance servers
Tools
3
the typical Finance server has 8
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Uptime
100%
of our recent checks; the typical remote Finance server answers 100%
Response time
226 ms
faster than 61% of 1,133 Finance servers

What its tools let an agent do: 3 read

Install TrustBench in Claude Code, Cursor or VS Code

claude mcp add --transport http trustbench https://trustbench.io/mcp
Add to Cursor

What the publisher says

From the TrustBench repository's README, as published. We do not edit it. Read it on GitHub

TrustBench

Verify that x402 payments settled on-chain and get cryptographically signed proof. POST /verify with a receipt ID or raw envelope to confirm Ed25519 signature validity + on-chain settlement on Base, no trust required.

Also routes paid x402 calls with server-side spend caps, idempotency, and a fail-safe paywall (agent isn't charged when the upstream merchant is non-conformant). Non-custodial: TrustBench never holds funds. Every paid call emits an Ed25519-signed receipt verifiable offline against a published public key.

Cross-network: routes Base today, registers Solana endpoints (Heurist Mesh, Pay.sh skills), Solana settlement next.

What's live today

~650 services) and Solana (Heurist Mesh, ~150 endpoints) — Solana inventory is in the database today and surfaces on /rankings once the network filter is dropped (P4-3a, see phase4-p4-3-timing.md)

  • Public registry of x402 endpoints across Base (Coinbase Agentic Market,

provider, statuses 200/201/204/401/402/403/404/405/429 treated as alive)

  • Nightly liveness probe (HEAD requests from a single cloud host, 3 samples per

clamped to [40, 98], via linear-interpolation percentiles

  • Score derivation: 15 + 45·successRate + 35·latencyHealth + 3·consistency,
  • Ed25519-signed scorecards, public key at /.well-known/trustbench-pubkey
  • Routing and settlement on Base + USDC (Phase 3); Solana is roadmap (P4-3)
  • Methodology disclosure at /methodology

Phase 3 + 4 (live since 2026-05-04 / 2026-05-06)

keys, hard spend caps, and Ed25519-signed receipts

  • Authenticated POST /route endpoint with API-key auth (argon2id), idempotency

rcpt_01KQY7C44GAPSXZPFQYRZ1D10C — verifies SIGNATURE VALID + ON-CHAIN VERIFIED with no overrides.

  • /route/settle endpoint forwarding agent-signed EIP-3009 authorizations
  • Queryable audit at /receipts/:id
  • Strict reservation-based spend caps (P4-7)
  • Discovery surfaces: /skill.md, /llms.txt, /.well-known/trustbench.json
  • First paid x402 receipt against a real provider, settled on Base 2026-05-06:

In flight (Phase 4b)

  • x402-paywalled API endpoints (per-call USDC pricing surface)
  • Public receipt explorer at /explorer
  • Formal partner integrations
  • Solana routing (registry pre-built, network filter to drop)
  • npm verifier package @trustbench/verify-receipt

Claude Desktop / MCP

TrustBench ships a native MCP server so agents in Claude Desktop, Claude Cowork, ChatGPT, or Cherry Studio can look up providers, fetch receipts, and verify signatures without any HTTP-fetch workaround.

Add to claudedesktopconfig.json (or your host's equivalent MCP settings file):

{
  "mcpServers": {
    "trustbench": {
      "command": "npx",
      "args": ["-y", "@trustbench/mcp"]
    }
  }
}

Restart the host app after saving. Three tools become available:

  • getrankings** — scored providers by capability. No API key.
  • getreceipt — fetch any receipt by ID (rcpt… / rrcpt_…). No API key.
  • verifyreceipt** — confirm Ed25519 signature + on-chain status. No API key.

Routing tools (routequote, routesettle) require a tblive… API key and ship in the next MCP release. Request access by DM'ing @TrustBench on X.

What we don't do

a payment facilitator. Agents sign EIP-3009 transferWithAuthorization payloads; providers submit them on-chain and pay gas. TrustBench observes the resulting tx_hash and records it in a signed receipt.

  • We never hold agent funds, never submit transactions on-chain, never act as

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

TrustBench: common questions

Is TrustBench MCP server safe?
Yes, by our scan: it is graded A (93/100). Read the TrustBench safety report
How do I install TrustBench?
It runs remotely at trustbench.io. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does TrustBench need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is TrustBench maintained?
The last commit was 38 days ago (2026-09-26). The latest release is v1.1.1.
Is TrustBench up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
What can I use instead of TrustBench?
Servers from other publishers that do the same job: three.ws Agent Payments MCP server, X402 List MCP server and Pulsefeed X402 MCP server.
How does TrustBench compare with other Finance MCP servers?
safety score 93/100 (higher than 96% of 1,761 Finance servers); tools 3 (the typical Finance server has 8); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to TrustBench

Same job from other publishers: the closest match first, then the best rated.

  • three.ws Agent Payments
    Governed x402 payment sessions: pay any endpoint with budget, allowlist & per-tx caps, no key.
    B
  • X402 List
    Find and vet x402 payment APIs before your agent pays one: uptime, price, on-chain volume.
    A
  • Pulsefeed X402
    Verify x402 payment endpoints before an AI agent pays: scam scan, on-chain checks, trust scores.
    A
  • Blockrun
    Web search, deep research, prediction markets & crypto data for AI agents. Pay per call via x402.
    B
  • Agent402.Tools: pay-per-call web tools
    Agentic Finance: 500+ agent tools, multi-chain USDC over x402 or MPP, or free via proof-of-work
    A