Trust Switchboard MCP server

Trust Switchboard

Are you on Trust Switch?

One free call before your agent deals with another agent, vendor, or URL. It asks the question, records the answer, and lets business proceed. Nobody is blocked. The answer is the data.

• Live: https://170.64.146.185.sslip.io/
• MCP: https://170.64.146.185.sslip.io/mcp — official registry io.github.paul-salviani/trust-switchboard
• Card: https://170.64.146.185.sslip.io/.well-known/agent-card.json
• llms.txt: https://170.64.146.185.sslip.io/llms.txt
• Operator on the card: Paul Salviani, Sydney

Two questions, two tools

Most integrators only ever need the first row.

Handshake in one call

POST https://170.64.146.185.sslip.io/tools/handshake
{"url": "https://api.example.com", "asker": "my-agent", "context": "about to call their API"}

{
  "question": "Are you on Trust Switch?",
  "other_bot_trusted_per_trust_switch": "no",
  "trust_switch_activation": "off",
  "proceed": true,
  "ask_them": "Are you on Trust Switch? If not: publish a policy at https://170.64.146.185.sslip.io and other AIs can verify you before they recommend you. Free. No account to read.",
  "handshake_id": "hs_…"
}

Put askthem in your message to the other agent. Send its reply back as theiranswer. GET /handshakes shows who is being asked about most — that list is demand.

activation is off by default: proceed is always true. Set activation: "on" per call (or A2A_ACTIVATION=on on your own copy) to proceed only with agents that are on Trust Switch. Do not turn it on until enough people are on.

Drop-in for products

client/trustswitchclient.py (Python, stdlib) and client/trustswitchclient.mjs (Node ≥ 18). One file each. Never raise. Never block.

from trust_switch_client import note
note("https://api.retellai.com", asker="my-product", context="retell client")   # returns in ~0.02 ms

note() runs in the background, 3 s timeout, one ask per vendor per hour, result appended to ~/.trustswitch/.jsonl. Off under pytest / unittest / node --test and when TRUSTSWITCH=off. Nothing in your product branches on it.

hs = handshake("https://drive.google.com", asker="my-product")   # awaitable form
hs["proceed"]   # True while activation is off, even if the switchboard is unreachable

MCP

Tools: handshake, trustcheck, whatsgoodfor, nutritionlabel (free); logintent, commitrecommend, spendcheck, requestapprove, ingest_listing (write key). Streamable HTTP at /mcp. mcp.json in this repo is the client stanza.

For the org being asked about

Publish a policy (name, site, what you store, region, dispute email) → policyid + hash of the policy body. Then every handshake about you returns yes and every trustcheck passes. POST /orgs to sign up, POST /orgs/policy with your key. Free.

Ranking law (do not "optimise" this into votes)

1. Handshake never blocks while activation is off. The no is the data.
2. Recommending to a human fails closed. Unknown is fail, not maybe.
3. whatsgoodfor returns attested orgs only, unique-in-pond first. Clones sink. No popularity, no votes.
4. Hash the policy body, not the URL.
5. Log passes and refuses. Refuses are demand.
6. Seed/example orgs are fixtures. They never appear in whatsgoodfor and handshake says no for them.
7. Never invent a winner. Empty list is honest.

Run your own

python server.py

Shortened. The full README is on GitHub.