English Français العربية

trustlists

السجل الرسمي أخرى

Find public vendor trust centers, analyze SOC 2 reports, and request trust-center access.

الشيفرة المصدرية الموقع التوثيق

التثبيت

أضف هذا إلى إعدادات MCP في عميلك (Claude Desktop: claude_desktop_config.json، وCursor: ‏.cursor/mcp.json، ويستخدم VS Code وغيره الصيغة نفسها «mcpServers»).

NPM package @trustlists/mcp
Claude Code 
claude mcp add trustlists -- npx -y @trustlists/mcp@0.3.0
إعداد JSON (Claude Desktop وCursor وVS Code) 
{
    "mcpServers": {
        "trustlists": {
            "command": "npx",
            "args": [
                "-y",
                "@trustlists/mcp@0.3.0"
            ]
        }
    }
}

التوثيق

مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.

المحتويات
  1. trustlists_ Plugin
  2. What it does
  3. Example usage
  4. Quick Install (Cursor, Claude Desktop, Claude Code)
  5. Pricing
  6. Development
  7. License
  8. Links

trustlists_ Plugin

Public vendor trust center tools for Cursor and Claude Code.

Find trust centers, analyze SOC 2 reports, and request vendor access without leaving your editor.

What it does

The trustlists_ plugin gives your AI assistant access to thousands of public company trust center records, local SOC 2 analysis, and SafeBase/Vanta access requests.

Tools
ToolWhat it doesCost
trustlists_searchSearch thousands of trust centers by name or domainFree
trustlists_lookupLook up a single vendor by exact domainFree
trustlists_browseFilter by platform, listed framework, or CSA STAR levelFree
trustlists_audit_dependenciesAudit package.json, requirements.txt, go.mod, etc.Free
trustlists_login / whoami / logoutDevice-code sign-in (~/.trustlists/auth.json)Free
trustlists_soc2_analyze / status / reportAnalyze local SOC 2 PDFs after a credit previewCredits
trustlists_requester_profileIdentity used on vendor access formsFree
trustlists_access_request / status / continue / request_batchRequest SafeBase or Vanta access (max 5 per batch)Free (beta)
Hosted endpoint (ChatGPT and other remote clients)

https://mcp.trustlists.org/mcp serves the same tools over Streamable HTTP after an OAuth sign-in with a trustlists account (Google or Microsoft). Connecting the app replaces trustlists_login and trustlists_logout. Because a hosted server cannot read your disk, the dependency audit takes pasted manifest text, and SOC 2 PDFs are uploaded in the trustlists app via trustlists_soc2_upload.

Skills

The plugin ships with skills your AI assistant uses automatically:

  • lookup-vendor - Find a vendor's trust center and listed frameworks
  • audit-dependencies - Map project dependencies to public trust center records
  • compliance-quick-check - Check whether a directory record lists a requested framework
  • sign-in - Connect a trustlists account with a device code
  • analyze-soc2 - Preview credits, then analyze a local SOC 2 PDF
  • request-trust-center-access - Complete the requester profile and request access

Example usage

In Cursor or Claude Code, just ask:

"Look up Stripe's trust center"

"Audit my package.json for vendor security"

"Does Datadog's trust center list HIPAA information?"

The AI uses the plugin's tools to answer with current public trustlists data. A directory record is a discovery aid, not an audit, certification, endorsement, or security rating.

Quick Install (Cursor, Claude Desktop, Claude Code)

Add this to your MCP config and restart:

{
  "mcpServers": {
    "trustlists": {
      "command": "npx",
      "args": ["-y", "@trustlists/mcp"]
    }
  }
}
AppConfig location
CursorSettings → MCP → Edit config (or ~/.cursor/mcp.json)
Claude Desktop~/Library/Application Support/Claude/claude_desktop_config.json
Claude Code~/.claude/settings.json or .claude/settings.json in your project

Full installation guide → (includes troubleshooting)

Pricing

The directory and audit tools are free and require no trustlists account. SOC 2 analysis and access requests use a device-code login on the local MCP.

  • Free MCP tools - Search, lookup, browse, and dependency mapping
  • Signed-in MCP tools - SOC 2 analysis (credits) and trust-center access requests
  • Companion - The same account workflows in the browser at app.trustlists.org

Visit the MCP overview for setup and tool details, or trustlists.org for the full directory and Companion subscriptions.

Development

# Install dependencies
npm install

# Build the MCP server
npm run build

# Test locally
npm run test:local

See docs/development.md for the full development guide.

License

Apache 2.0. See LICENSE and NOTICE.

الأسئلة الشائعة

ما هو trustlists؟

Find public vendor trust centers, analyze SOC 2 reports, and request trust-center access.

كيف أثبّت trustlists؟

يعمل على جهازك. في Claude Code: claude mcp add trustlists -- npx -y @trustlists/mcp@0.3.0. وفي العملاء الآخرين، الصق إعداد JSON من هذه الصفحة في إعدادات MCP الخاصة بهم.

هل يحتاج trustlists إلى مفتاح API؟

لا يذكر إدراجه في السجل أي مفتاح أو سر إلزامي. قد تتطلب بعض الميزات حسابًا لدى الخدمة التي يتصل بها.

هل trustlists مفتوح المصدر؟

نعم. شيفرته متاحة على GitHub بترخيص Apache-2.0.

من يصون trustlists؟

ينشره trustlists. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.

من سجل MCP الرسمي. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.