English Français العربية

com.craftedtrust/mcp-shield

Registre officiel Recherche et web

Trust verification for MCP servers. Check scores, scan for security issues, search 4,200+ servers.

Code source Documentation

Installation

Ajoutez ceci à la configuration MCP de votre client (Claude Desktop : claude_desktop_config.json ; Cursor : .cursor/mcp.json ; VS Code et les autres utilisent la même forme « mcpServers »).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http mcp-shield 'https://mcp.craftedtrust.com/api/v1/mcp'
Configuration JSON (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "mcp-shield": {
            "type": "http",
            "url": "https://mcp.craftedtrust.com/api/v1/mcp"
        }
    }
}

Documentation

Tirée du README du projet sur GitHub, actualisée chaque semaine. Les liens ouvrent GitHub.

Sommaire
  1. Trust-Gated Agent Examples
  2. Quick Start
  3. The Pattern
  4. Examples
  5. How It Works
  6. Trust Score Grades
  7. API Reference
  8. License

Trust-Gated Agent Examples

Reference implementations showing how to make AI agents check CraftedTrust before connecting to any MCP server. If a server scores D or F, the agent refuses to connect.

This is the "SSL certificate check for AI agents" pattern.

Quick Start

Add CraftedTrust to your agent's MCP config:

{
  "mcpServers": {
    "craftedtrust": {
      "url": "https://mcp.craftedtrust.com/api/v1/mcp",
      "description": "Check trust scores before connecting to MCP servers"
    }
  }
}

Your agent now has access to 6 tools:

ToolDescription
check_trustLook up trust score by URL or npm name
scan_serverTrigger a live security scan
search_registrySearch 4,200+ indexed MCP servers
get_statsEcosystem statistics
pay_for_certificationInitiate USDC certification payment
verify_paymentVerify on-chain payment

The Pattern

Before your agent connects to any new MCP server:

  1. Call check_trust on CraftedTrust
  2. If grade is D or F, refuse and explain why
  3. If grade is A/B/C, proceed with the connection

Examples

Python (LangGraph)

See python/trust_gated_agent.py for a complete LangGraph agent that gates MCP connections through CraftedTrust.

cd python
pip install -r requirements.txt
python trust_gated_agent.py
TypeScript (MCP Client)

See typescript/trust-gated-client.ts for a TypeScript MCP client that checks trust scores before connecting.

cd typescript
npm install
npx tsx trust-gated-client.ts

How It Works

Agent receives task → needs mcp.example.com
         ↓
Agent calls CraftedTrust check_trust("mcp.example.com")
         ↓
Score: 82/100, Grade: B ← Safe
         ↓
Agent connects to mcp.example.com ✓
Agent receives task → needs sketchy-server.xyz
         ↓
Agent calls CraftedTrust check_trust("sketchy-server.xyz")
         ↓
Score: 15/100, Grade: F ← Dangerous
         ↓
Agent refuses: "Server scored F (15/100). Not connecting." ✗

Trust Score Grades

GradeScoreMeaning
A90-100Excellent security practices
B75-89Good security, minor improvements possible
C60-74Adequate but has gaps
D40-59Significant security issues
F0-39Critical issues, do not connect

API Reference

Full API documentation: mcp.craftedtrust.com/api-docs.html

License

MIT

Built by Cyber Craft Solutions LLC

Questions fréquentes

Qu'est-ce que com.craftedtrust/mcp-shield ?

Trust verification for MCP servers. Check scores, scan for security issues, search 4,200+ servers.

Comment installer com.craftedtrust/mcp-shield ?

Il fonctionne comme serveur distant. Dans Claude Code : claude mcp add --transport http mcp-shield 'https://mcp.craftedtrust.com/api/v1/mcp'. Pour les autres clients, collez la configuration JSON de cette page dans leurs réglages MCP.

Faut-il une clé API pour com.craftedtrust/mcp-shield ?

Son entrée au registre n'indique aucune clé ni secret obligatoire. Certaines fonctions peuvent tout de même demander un compte auprès du service auquel il se connecte.

com.craftedtrust/mcp-shield est-il open source ?

Oui. Son code est sur GitHub sous licence MIT.

Qui maintient com.craftedtrust/mcp-shield ?

Il est publié par cybercraftsolutionsllc. AI.tn le référence sans le maintenir ni le recommander.

Issu du registre MCP officiel. Être listé n'est pas une recommandation : vérifiez le code et les permissions d'un serveur avant de lui donner accès à vos données.