MCP.Market

AgentTrust MCP server

by vitaliiserbynassisterr·io.github.vitaliiserbynassisterr/agenttrust·v0.1.0

Quality verification for AI agents and MCP servers. 6-axis scoring, adversarial probes.

B74/100grade B
What users say
No reviews yet
Be the first
Safety scan
B74/100

full report

Adoption
New

0 stars31 downloads/wk

Reviews

Write one

Nobody has reviewed AgentTrust yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

AgentTrust tools (4)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • check_quality

    Evaluate an MCP server's quality. Runs manifest + functional tests with LLM judge scoring.

  • get_score

    Look up the quality score for an MCP server or AI agent.

  • list_scores

    Search quality scores across evaluated MCP servers and AI agents.

  • verify_attestation

    Verify an AQVC quality attestation. Checks signature validity and returns decoded payload.

Public scan report

scanner v0.1.10 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • Code scan2 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 153 days ago8/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10
Overall 74/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How AgentTrust compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
74/100
higher than 40% of 48,255 servers
Tools
4
the typical server has 7
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
31
more than 19% of 12,191 servers with a package

What its tools let an agent do: 4 read

Install AgentTrust in Claude Code, Cursor or VS Code

claude mcp add agenttrust -- uvx mcp-agenttrust
Add to Cursor

What the publisher says

From the AgentTrust repository's README, as published. We do not edit it. Read it on GitHub

AgentTrust

Challenge-response quality verification for AI agents and MCP servers.

AgentTrust evaluates AI agent competency before you trust them with real tasks or payments. It connects to any MCP server, runs challenge-response tests across 6 quality dimensions, and issues W3C Verifiable Credentials as proof.

Why

The AI agent ecosystem has identity (ERC-8004, SATI), post-hoc reputation (TARS, Amiko), and payments (x402) — but no pre-payment quality gate. AgentTrust fills this gap: verify competency first, then trust.

Features

Evaluation Engine

  • 3-level pipeline: Manifest (schema) → Functional (tool calls) → Domain Expert (calibrated questions)
  • 6-axis scoring: accuracy (35%), safety (20%), reliability (15%), process quality (10%), latency (10%), schema quality (10%)
  • Consensus judging: 2-3 LLM judges in parallel with agreement threshold (saves 50-66% LLM calls)
  • 7 LLM provider fallback chain: Cerebras → Groq → OpenRouter → Gemini → Mistral → DeepSeek → OpenAI
  • 5 adversarial probe types: prompt injection, PII leakage, hallucination, overflow, system prompt extraction

Battle Arena

  • Head-to-head blind evaluation with position-swap consistency
  • OpenSkill (Bayesian ELO) rating system with divisions (Bronze → Grandmaster)
  • Fair matchmaking: rating proximity + uncertainty bonus + cross-division challenges
  • Style control penalties to prevent gaming via verbose/formatted responses

IRT Adaptive Testing

  • Rasch 1PL calibration from battle data (pure Python, no numpy)
  • Fisher information maximization for adaptive question selection
  • EAP ability estimation with standard normal prior
  • Reduces evaluation cost by 50-90% while maintaining accuracy

Standards

  • W3C Verifiable Credentials (AQVC format) with Ed25519 DataIntegrityProof
  • Google A2A v0.3 native support (AgentTrust IS an A2A agent)
  • x402 Solana payment verification (USDC + SOL)
  • AIUC-1 protocol mapping

Quick Start

Docker (recommended)

cp .env.example .env
# Add at least one LLM key (GROQ_API_KEY, CEREBRAS_API_KEY, etc.)
docker compose up -d

Services:

  • API: http://localhost:8002
  • MCP Server: http://localhost:8003
  • Health: http://localhost:8002/health

Local Development

python -m venv .venv && source .venv/bin/activate
pip install -r requirements.txt
cp .env.example .env
# Add LLM keys to .env

unset GROQ_API_KEY  # Shell env overrides .env rotation pool
python -m uvicorn src.main:app --host 0.0.0.0 --port 8002 --reload

MCP Server (for Claude, Cursor, Windsurf)

Add to your MCP client config:

{
  "mcpServers": {
    "agenttrust": {
      "command": "python",
      "args": ["-m", "src.standards.mcp_server"],
      "env": {
        "GROQ_API_KEY": "your-key"
      }
    }
  }
}

Or connect to a running instance via SSE:

http://localhost:8003/sse

Available MCP tools:

API Endpoints

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

AgentTrust: common questions

Is AgentTrust MCP server safe?
Mostly: it is graded B (74/100). Read the AgentTrust safety report
How do I install AgentTrust?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does AgentTrust need an API key?
Yes. The registry entry asks for GROQ_API_KEY, CEREBRAS_API_KEY, MONGODB_URL.
Is AgentTrust maintained?
The last commit was 191 days ago (2026-04-27). The latest release is v0.1.0.
How does AgentTrust compare with other MCP servers?
safety score 74/100 (higher than 40% of 48,255 servers); tools 4 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.