Is It Trust Ready — agent-trust-readiness scanner

io.github.mnemomPublished by GitHub account mnemomv1.0.0Updated Nov 2, 2026

Scan any website or MCP server for agent-trust-readiness; returns a signed, verifiable scorecard.

VerifiedStreamable HTTPWeb executableWeb Search & ScrapingSecurity & Monitoring

Overview

AI-generated overview

Remote MCP server that scans websites and MCP servers for AI agent trust readiness and returns signed, verifiable scorecards.

What you can do
  • Look up agent trust ratings, badges and directory entries, and verify signed reputation records
  • Scan a website or MCP server for agent-trust-readiness and verify the resulting scorecard in-band
  • Claim an agent identity, verify agent bindings, and preview or publish alignment and protection cards
  • Report false positives and get orientation help for the tool surface
When to use it
Useful when you want an assistant to check whether a site or MCP server is ready for AI agents, or to look up and verify trust ratings for agents before relying on them. Also relevant if you maintain an agent identity and want to publish alignment or protection information.
Requirements
A remote streamable-HTTP endpoint; no local runtime or package. Read tools work anonymously with no key or login. Write tools need OAuth 2.0 with dynamic client registration and PKCE, or an X-Mnemom-Api-Key header. Network access to the provider's API is required.
Before you install
Write actions such as claiming an agent or publishing alignment and protection cards require authentication and change data on the provider's platform. An API key header is an alternative to OAuth, so treat it as a secret. Scans send the target website or server address to the provider, and scorecards are only trustworthy if you verify the signature yourself.

Installation

In SourceWeft

  1. Open Is It Trust Ready — agent-trust-readiness scanner in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.mnemom%2Fisittrustready/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "is-it-trust-ready-agent-trust-readiness": {
      "type": "http",
      "url": "https://api.isittrustready.ai/mcp"
    }
  }
}

README

Mnemom — Trust Ratings for AI Agents (MCP server)

Canonical home for the Mnemom Model Context Protocol (MCP) server — trust infrastructure for the agent internet. Look up a verifiable Trust Rating for an AI agent, scan a website's AI-trust-readiness, verify signed scorecards in‑band, claim an agent identity, and publish an alignment card.

This repo is the public, canonical source of truth for the server's connection details and manifest. The server implementation runs on Mnemom's platform; this repo is its metadata + documentation home.

Connect

Streamable‑HTTP MCP endpoint (curated directory profile, 16 tools):

https://api.mnemom.ai/mcp?profile=directory

The full manifest is in server.json.

In Claude / ChatGPT / any MCP client

Add a custom connector pointing at the URL above. Reads are anonymous — you can list tools and call the reputation, search, scan, verify, and get‑started tools with no account. Writes (claiming an agent, publishing an alignment card) require authentication.

Authentication

  • Reads: zero‑auth. No key, no login.
  • Writes: OAuth 2.0 with Dynamic Client Registration (RFC 7591) + PKCE. Discovery follows RFC 9728 — an unauthenticated write returns 401 with a WWW‑Authenticate header pointing at the Protected Resource Metadata, so a compliant client can self‑configure:
    • Protected Resource Metadata: https://api.mnemom.ai/.well-known/oauth-protected-resource/mcp
    • Authorization Server Metadata: https://api.mnemom.ai/.well-known/oauth-authorization-server
  • An X-Mnemom-Api-Key header is accepted as an alternative to OAuth.

What's in the directory profile

A curated 16‑tool surface, grouped:

  • Reputation — get_reputation, get_reputation_badge, search_reputation_directory, verify_reputation, list_agents, get_agent (agent risk history is authenticated — see get_risk_history on the full surface)
  • Website trust scanning — scan_trust, verify_scan
  • Identity & protection — claim_agent, verify_agent_binding, preview_compose_alignment_by_agent, put_alignment_by_agent, preview_compose_protection_by_agent, put_protection_by_agent, report_recipe_fn_fp
  • Orientation — get_started

The default endpoint (/mcp, no profile) exposes the full power‑user tool surface; ?profile=directory is the curated face used for directory listings.

Verify, don't trust

Scan scorecards are Ed25519‑signed. Verify any scorecard in‑band with the verify_scan tool, or check the signature yourself against the published key:

  • Scanner JWKS: mnemom://iitr/jwks (also at the isittrustready surface)
  • The scorecard carries a self‑describing verification block (algorithm, key id, canonicalization rule) so a holder can reconstruct and check the signature.

Links

Websitehttps://www.mnemom.ai
For agentshttps://www.mnemom.ai/for-agents
Documentationhttps://docs.mnemom.ai
Trust‑readiness rubrichttps://www.isittrustready.ai/rubric
Contact[email protected]

© Mnemom. The server implementation is operated by Mnemom; this repository is its public manifest and documentation home.

Source: README.md at commit 72c49c5

Tools

0
SourceWeft has not read this server's tools yet.

Version history

1
  1. v1.0.0LatestSep 16, 2026

Score

75% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.