com.craftedtrust/mcp-shield
Trust verification for MCP servers. Check scores, scan for security issues, search 4,200+ servers.
التثبيت
أضف هذا إلى إعدادات MCP في عميلك (Claude Desktop: claude_desktop_config.json، وCursor: .cursor/mcp.json، ويستخدم VS Code وغيره الصيغة نفسها «mcpServers»).
claude mcp add --transport http mcp-shield 'https://mcp.craftedtrust.com/api/v1/mcp'
{
"mcpServers": {
"mcp-shield": {
"type": "http",
"url": "https://mcp.craftedtrust.com/api/v1/mcp"
}
}
}
التوثيق
مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.
المحتويات
Trust-Gated Agent Examples
Reference implementations showing how to make AI agents check CraftedTrust before connecting to any MCP server. If a server scores D or F, the agent refuses to connect.
This is the "SSL certificate check for AI agents" pattern.
Quick Start
Add CraftedTrust to your agent's MCP config:
{
"mcpServers": {
"craftedtrust": {
"url": "https://mcp.craftedtrust.com/api/v1/mcp",
"description": "Check trust scores before connecting to MCP servers"
}
}
}
Your agent now has access to 6 tools:
| Tool | Description |
|---|---|
check_trust | Look up trust score by URL or npm name |
scan_server | Trigger a live security scan |
search_registry | Search 4,200+ indexed MCP servers |
get_stats | Ecosystem statistics |
pay_for_certification | Initiate USDC certification payment |
verify_payment | Verify on-chain payment |
The Pattern
Before your agent connects to any new MCP server:
- Call
check_truston CraftedTrust - If grade is D or F, refuse and explain why
- If grade is A/B/C, proceed with the connection
Examples
Python (LangGraph)
See python/trust_gated_agent.py for a complete LangGraph agent that gates MCP connections through CraftedTrust.
cd python
pip install -r requirements.txt
python trust_gated_agent.py
TypeScript (MCP Client)
See typescript/trust-gated-client.ts for a TypeScript MCP client that checks trust scores before connecting.
cd typescript
npm install
npx tsx trust-gated-client.ts
How It Works
Agent receives task → needs mcp.example.com
↓
Agent calls CraftedTrust check_trust("mcp.example.com")
↓
Score: 82/100, Grade: B ← Safe
↓
Agent connects to mcp.example.com ✓
Agent receives task → needs sketchy-server.xyz
↓
Agent calls CraftedTrust check_trust("sketchy-server.xyz")
↓
Score: 15/100, Grade: F ← Dangerous
↓
Agent refuses: "Server scored F (15/100). Not connecting." ✗
Trust Score Grades
| Grade | Score | Meaning |
|---|---|---|
| A | 90-100 | Excellent security practices |
| B | 75-89 | Good security, minor improvements possible |
| C | 60-74 | Adequate but has gaps |
| D | 40-59 | Significant security issues |
| F | 0-39 | Critical issues, do not connect |
API Reference
Full API documentation: mcp.craftedtrust.com/api-docs.html
License
MIT
Built by Cyber Craft Solutions LLC
الأسئلة الشائعة
ما هو com.craftedtrust/mcp-shield؟
Trust verification for MCP servers. Check scores, scan for security issues, search 4,200+ servers.
كيف أثبّت com.craftedtrust/mcp-shield؟
يعمل كخادم بعيد. في Claude Code: claude mcp add --transport http mcp-shield 'https://mcp.craftedtrust.com/api/v1/mcp'. وفي العملاء الآخرين، الصق إعداد JSON من هذه الصفحة في إعدادات MCP الخاصة بهم.
هل يحتاج com.craftedtrust/mcp-shield إلى مفتاح API؟
لا يذكر إدراجه في السجل أي مفتاح أو سر إلزامي. قد تتطلب بعض الميزات حسابًا لدى الخدمة التي يتصل بها.
هل com.craftedtrust/mcp-shield مفتوح المصدر؟
نعم. شيفرته متاحة على GitHub بترخيص MIT.
من يصون com.craftedtrust/mcp-shield؟
ينشره cybercraftsolutionsllc. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.
من سجل MCP الرسمي. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.