English Français العربية

TrustScan

Official registry Security

Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.

Source code Website

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http trustscan 'https://trust-scan-production.up.railway.app/mcp/'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "trustscan": {
            "type": "http",
            "url": "https://trust-scan-production.up.railway.app/mcp/"
        }
    }
}

Frequently asked questions

What is TrustScan?

Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.

How do I install TrustScan?

It runs as a remote server. In Claude Code: claude mcp add --transport http trustscan 'https://trust-scan-production.up.railway.app/mcp/'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does TrustScan need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is TrustScan open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains TrustScan?

It is published by entradox. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.