Trust Oracle MCP server
online · 100% uptimeIndependent A-F trust grade for any MCP server, watched for drift. Free, never for sale.
6 stars
Reviews
Write oneNobody has reviewed Trust Oracle yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Trust Oracle tools (3, 1 write)
write = sends, deletes, buys or postscheck_mcp_driftFreeCheck whether an MCP server's tool definitions have changed since it was last trusted (rug-pull / schema-drift detection, the CVE-2025-54136 class). Returns how long the tool surface has been stable, how many times it has changed, and the last change. Use after approval to detect post-trust mutation.
grade_mcp_serverFreeIndependently grade an MCP server (A–F) BEFORE connecting an agent to it. Returns spec-conformance, security (OWASP MCP Top 10), reliability, tool-hygiene and transparency sub-scores plus a connect/caution/avoid recommendation. Audited by wmcp.sh; the grade is free and never for sale.
verify_before_executewrite actionFreeVerify an MCP server immediately BEFORE you execute any of its tools. Combines the continuously-watched trust grade and live drift status into a single connect/caution/avoid verdict (ok | caution | drifted | failing | ungraded), so you can gate the call in one step. Free, read-tier. The grade is independent and never for sale.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- –Code scanremote-only server, no package to scann/a
- Live reliabilityremote reachable in 677ms20/20
- Tool poisoning3 tool descriptions checked15/15
- Auth qualityopen endpoint exposes 1 write-action tools with no auth3/15
- Maintenancelast push 109 days ago8/15
- Maintainer identityregistry namespace matches repository owner6/10
Findings (1)
- highWrite-action tools reachable without authentication
auth.open-write
How Trust Oracle compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 69/100
- higher than 33% of 48,255 servers
- Tools
- 3
- the typical server has 7
- Tools that change things
- 33%
- typical: 0%. Fewer write tools means less an agent can break
- Uptime
- 100%
- of our recent checks; the typical remote server answers 100%
- Response time
- 215 ms
- faster than 61% of 30,031 servers
- GitHub stars
- 6
- more than 85% of 28,688 servers
What its tools let an agent do: 2 read · 1 change
Install Trust Oracle in Claude Code, Cursor or VS Code
claude mcp add --transport http trust-oracle https://wmcp.sh/mcp/trust
What the publisher says
From the Trust Oracle repository's README, as published. We do not edit it. Read it on GitHub
wmcp.sh
Add any website to Claude, Cursor, or Codex as agent-callable MCP tools — in one line of config. No per-server build, no SDK.
▶ Watch the 30-sec demo — paste a URL → tools appear → agent calls addtocart.
wmcp.sh is a real, spec-compliant MCP server (JSON-RPC 2.0 over Streamable HTTP) that turns any URL into agent-callable tools — Shopify product pages, OpenAPI specs, JSON-LD pages, OAuth-protected APIs. Every other MCP server is one-per-service and hand-built; wmcp is one endpoint that adapts to whatever URL you point it at. Paste a config line and your agent can read prices, list variants, or call an API on a site that ships no MCP server of its own.
Live now: wmcp.sh · Directory · Blog · /llms.txt
30-second quickstart
Connect any URL to your MCP client (the flagship)
Point any MCP client — Claude Code, Claude Desktop, Cursor, Codex, Cline, VS Code — at a per-URL endpoint: /mcp/u/. That's the whole install. The server exposes that page's extracted tools natively (tools/list + tools/call):
{
"mcpServers": {
"allbirds": {
"type": "http",
"url": "https://wmcp.sh/mcp/u/aHR0cHM6Ly93d3cuYWxsYmlyZHMuY29tL3Byb2R1Y3RzL21lbnMtd29vbC1ydW5uZXJz"
}
}
}That base64url string decodes to https://www.allbirds.com/products/mens-wool-runners. Encode your own:
node -e "process.stdout.write(Buffer.from('https://your-url.example').toString('base64url'))"Compose several sites into one MCP server — repeat the url param; tool names are namespaced per host (siteaaddtocart):
{ "mcpServers": { "wmcp": { "type": "http", "url": "https://wmcp.sh/mcp/url?url=https://site-a.example&url=https://site-b.example" } } }tools/list (discovery) is free. tools/call (live execution) needs a paid key, passed as a Bearer header:
{ "mcpServers": { "wmcp": { "type": "http", "url": "https://wmcp.sh/mcp/u/<base64url>", "headers": { "Authorization": "Bearer webmcp_live_…" } } } }type may be "http" or "streamable-http" (same transport). For Claude Desktop builds without remote-MCP support, bridge with npx mcp-remote . Full walkthrough: /how-to/install-claude-desktop-mcp.
Or just hit the REST API (no client, no key for reads)
# any URL → MCP-shaped tool list
curl 'https://wmcp.sh/api/v1/tools?url=https://www.allbirds.com/products/mens-wool-runners'Returns a JSON tool list in the Claude tooluse / OpenAI functioncall / MCP shape — getprice, addtocart, listvariants — that any agent can invoke.
How it works
A 5-tier extraction chain turns most URLs into tools with zero per-site work. Each tier is tried in order; the first that detects the URL wins. The last tier is an LLM fallback that produces best-effort tools and caches the result.
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Trust Oracle: common questions
- Is Trust Oracle MCP server safe?
- With care: it is graded C, so read the findings first (69/100). Read the Trust Oracle safety report
- How do I install Trust Oracle?
- It runs remotely at wmcp.sh. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does Trust Oracle need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Trust Oracle maintained?
- The last commit was 147 days ago (2026-06-10). The latest release is v1.0.0.
- Is Trust Oracle up?
- 100% of our last 28 checks got an answer. We check remote servers about four times a day.
- How does Trust Oracle compare with other MCP servers?
- safety score 69/100 (higher than 33% of 48,255 servers); tools 3 (the typical server has 7); tools that change things 33% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.