io.github.entradoxPublished by GitHub account entradoxv0.1.0Updated Oct 24, 2026
Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.
The publisher's own server: scan.mx Email Diagnostics
TrustScan is a remote security scanner that lets an assistant check an MCP server, skill package, or single file for prompt injection, dangerous code, secrets,
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/io.github.entradox%2Ftrust-scan/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.Add this to your client's mcpServers config.
{
"mcpServers": {
"trustscan": {
"type": "http",
"url": "https://trust-scan-production.up.railway.app/mcp/"
}
}
}This repository has no README.
Scan MCP Server or Skill Package
Security-scan an MCP server or skill package before trusting it. Runs all four checks — invisible Unicode prompt-injection, dangerous code patterns (MCP001–006), hardcoded secrets, typosquat package names — and returns a 0-100 score, letter grade, and detailed findings. Run this on any directory BEFORE wiring it into your agent. Read-only: never modifies the scanned target.
pathrequiredpackage_nameScan Single File
Security-scan a single file for invisible Unicode, dangerous patterns, and secrets. Returns a severity-weighted score and per-finding detail (rule, severity, location). Read-only: the file is never modified.
filepathrequiredSkills List Tool
List this product's skills. Each entry carries the SKILL.md URI, its name and description, verbatim frontmatter, and a per-file sha256 manifest. Read a body with `read_skill`.
Takes no parameters.
Read Skill
Read a product skill file by its skill:// URI.
urirequired75% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.
Declare a license in the repository or the registry entry.
mx.scanOfficial publisher
Remote MCP server that lets an assistant run graded email deliverability and DNS checks on a domain, covering MX, SPF, DKIM, DMARC, blacklists and more.
fr.mtg-trade
Scans Magic: The Gathering binder photos, turning uploaded page images into processed scan jobs, with free daily pages and paid credits.
Published by GitHub account diegoperezg7
Security scanner for MCP servers that checks tool lists for poisoning, shadowing, excessive permissions, leaked secrets and weak transports.
Published by GitHub account JordanKarst
Derived prediction-market flow, price changes, trader research and news. 11 read-only tools.
Published by GitHub account 6mickswagger9
Local stdio MCP server exposing an x402 paid API for AI agents, settling payments in USDC on Base through a CDP facilitator.