Trooth
io.github.trooth-eng/trooth-network·v1.1.1Look up a witnessed Trust Profile, read a domain's security surface, or verify a Trust Ledger Token.
Usage numbers are collected on the next scan
Reviews
Write oneNobody has reviewed Trooth yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Tools (4)
write = sends, deletes, buys or poststrooth_askFreeAsk about Trooth itself: what the Trooth Network is, what one company record carries, why a company needs one, pricing (free), and how witnessing works. The Trooth Network is Trooth's only product. Answers come from Trooth's curated knowledge base.
trooth_outside_in_readFreePerform a live, neutral read of a domain's public security surface right now: HTTPS/TLS reachability, common security headers (HSTS, CSP, nosniff, frame protection, referrer policy), and /.well-known/security.txt. These are observations from the public internet, not witnessed evidence and not a grade.
trooth_public_trust_profileFreeLook up a company's published, witnessed Trust Profile on Trooth by domain or slug. Returns the witnessed standing, pillar summary, and evidence-chain stats for companies that publish an OS profile, or the witnessed Network standing (signed scan result) for companies listed in the public directory. Unknown companies return an honest not-found.
trooth_verifyFreeVerify a Trooth Trust Ledger Token (a signed, portable trust receipt in tlt2 / tlt form, or its JTI). Re-runs both signatures independently and returns whether the token is valid, expired, revoked, or tampered - plus honest provenance: Trooth's outer signature attests only the witnessing event and the byte-for-byte payload at issuance, never the truthfulness of the declared claims. Unknown tokens return an honest not-found.
Public scan report
scanner v0.1.2 · 2026-09-18 · same rubric, same numbers if you re-run it
- –Code scanremote-only server, no package to scann/a
- Live reliabilityremote reachable in 1124ms20/20
- Tool poisoning4 tool descriptions checked15/15
- Auth qualityopen endpoint, read-only tools10/15
- Maintenancelast push 0 days ago15/15
- Maintainer identitynamespace and repository owner differ4/10
Install directly
claude mcp add --transport http trooth-network https://api.trooth.co/public/mcp
Alternatives to Trooth
Same job, ranked by rating then adoption.
DraugrSecurity scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.not reviewed—A- security-preflightStatic MCP, source-code and injection-indicator checks with redacted signed receipts.not reviewed—B
- b/citedAEO tools: scan any URL for AI-citation readiness, read the public leaderboard and citation panel.not reviewed—B
- FlowSentrySecurity scanner for n8n workflows + live MCP Trust-Check. 18 rules, OWASP mapped. Paid x402 API.not reviewed—C