Trusteed
CTEM for your Trusteed tenant: security summary, findings, compliance gaps, and scans via OAuth.
التثبيت
أضف هذا إلى إعدادات MCP في عميلك (Claude Desktop: claude_desktop_config.json، وCursor: .cursor/mcp.json، ويستخدم VS Code وغيره الصيغة نفسها «mcpServers»).
claude mcp add --transport http trusteed 'https://mcp.trusteed.io/mcp'
{
"mcpServers": {
"trusteed": {
"type": "http",
"url": "https://mcp.trusteed.io/mcp"
}
}
}
التوثيق
مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.
المحتويات
Trusteed Claude Marketplace
Official Trusteed plugins for Claude Code and Claude Cowork.
This repository is a Claude plugin marketplace. It packages the Trusteed remote MCP server so teams can install it with a single plugin command.
| Item | Value |
|---|---|
| Marketplace name | trusteed |
| Plugin | trusteed-mcp |
| MCP endpoint | https://mcp.trusteed.io/mcp |
| Transport | Streamable HTTP (type: http) |
| Auth | OAuth 2.0 (Trusteed portal login) |
OAuth Client ID (required for Claude.ai connectors)
Trusteed uses a static public PKCE client (no secret). If Claude shows “Automatic client registration isn’t supported… add an OAuth Client ID”, paste:
f5f30ba8-da81-40ef-8e75-aaf98f75f324
Claude.ai / Desktop custom connector
- Settings → Connectors → Add custom connector
- MCP URL:
https://mcp.trusteed.io/mcp - Advanced → OAuth Client ID: value above (leave Client Secret empty)
- Connect and sign in with an existing Trusteed portal account
Install (Claude Code plugin)
# Add this marketplace
/plugin marketplace add trusteed-io/trusteed-mcp-plugin
# Install the Trusteed MCP plugin
/plugin install trusteed-mcp@trusteed
Then authenticate:
/mcp
Select trusteed, complete the browser login with your existing Trusteed portal account, and return to Claude.
Local development test
claude --plugin-dir ./plugins/trusteed-mcp
Prerequisites
- An active Trusteed account (MCP does not create users).
- Claude Code (or Cowork) with plugin support.
- Network access to:
https://mcp.trusteed.io(MCP resource server)https://app.trusteed.io(OAuth authorization server)
What you get
After install + OAuth, Claude can call Trusteed MCP tools for your tenant:
Read
get_security_summary— high-level posturesearch_assets— inventory searchlist_findings/get_finding— vulnerabilitiesget_compliance_status/list_control_gaps— complianceexplain_risk— narrative risk summaryget_scan_status/get_connection_status— status
Write / action
start_scan/cancel_scan— on-demand scansconnect_cloud_account— hosted URL to connect cloud credentials (never through chat)
Bundled skills (examples):
/trusteed-mcp:security-overview/trusteed-mcp:findings-triage/trusteed-mcp:connect-cloud
Repository layout
.claude-plugin/marketplace.json # marketplace catalog
plugins/trusteed-mcp/
.claude-plugin/plugin.json # plugin manifest
.mcp.json # remote MCP + OAuth
README.md # detailed plugin docs
skills/ # Claude skills
Website / how-to copy
Ready-to-publish page content (EN + TR) for Claude & ChatGPT setup:
Privacy
Trusteed processes security and asset data for your tenant according to our privacy policy:
- https://trusteed.io/privacy (update if your public URL differs)
Cloud credentials are entered only on hosted Trusteed pages; they are never sent through the MCP chat channel.
Support
- Email: support@trusteed.io
- Product: https://trusteed.io
- MCP service source: https://gitlab.com/trusteed/trusteed-mcp-service
License
Apache-2.0 — see LICENSE.
الأسئلة الشائعة
ما هو Trusteed؟
CTEM for your Trusteed tenant: security summary, findings, compliance gaps, and scans via OAuth.
كيف أثبّت Trusteed؟
يعمل كخادم بعيد. في Claude Code: claude mcp add --transport http trusteed 'https://mcp.trusteed.io/mcp'. وفي العملاء الآخرين، الصق إعداد JSON من هذه الصفحة في إعدادات MCP الخاصة بهم.
هل يحتاج Trusteed إلى مفتاح API؟
لا يذكر إدراجه في السجل أي مفتاح أو سر إلزامي. قد تتطلب بعض الميزات حسابًا لدى الخدمة التي يتصل بها.
هل Trusteed مفتوح المصدر؟
شيفرته علنية على GitHub، لكن المستودع لا يعلن ترخيصًا قياسيًا.
من يصون Trusteed؟
ينشره trusteed-io. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.
من سجل MCP الرسمي. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.