agentforge-trust-mcp
MCP server that lets AI agents audit MCP servers before using them.
AgentForge maintains a Trust Score (0–100) for every MCP server in its catalog, computed across five dimensions: code health, security scan, behavioral audit, community trust, and EU compliance. This MCP server exposes those audits as tools any agent can call.
Installation
npx -y agentforge-trust-mcp
Claude Desktop config
{
"mcpServers": {
"agentforge-trust": {
"command": "npx",
"args": ["-y", "agentforge-trust-mcp"]
}
}
}
Environment
| Variable | Default | Purpose |
|---|---|---|
AGENTFORGE_API_URL | https://agentforge.community | Override for self-hosted |
AGENTFORGE_API_KEY | none | Enterprise tier (private catalogs, custom policies) |
Tools
check_trust
Returns the AgentForge Trust Score for a server identified by server_id,
slug, or github_url. Always call this before connecting to a new server.
evaluate_policy
Allow/deny gate. Pass a policy like {min_overall: 70, required_badges: ["actively_maintained"]}
and get back allowed: true|false with per-check detail.
list_trusted
Search the AgentForge catalog for servers matching a category and trust threshold. Useful for "find me a secure database MCP server with overall ≥ 80".
recommend
Natural-language search with trust filter. "I need to validate Czech VAT IDs" returns ranked results filtered by minimum trust.
Use case
Agent: user wants me to use "some-financial-mcp" server.
Agent: let me check its trust first…
→ check_trust(slug="some-financial-mcp")
← overall_score: 42, badges: [], security_scan: pending
Agent: trust is too low, skipping. Let me find alternatives.
→ recommend(query="invoice conversion Czech VAT", min_overall=75)
← 3 results with scores 87, 84, 79
Agent: connecting to the 87-scored server instead.
Trust dimensions
| Dimension | Weight | Source |
|---|---|---|
| Security Scan | 30% | Snyk, GitHub Advisory, secret scanning |
| Code Health | 20% | Commit recency, issue ratio, license |
| Behavioral Audit | 20% | Claude-powered source review, red flag detection |
| Community Trust | 15% | Stars, forks, author reputation |
| EU Compliance | 15% | GDPR, AI Act, data residency |
Audits rotate every 14 days; evaluate_policy reports partial: true if not
all dimensions are current.
License
MIT — AgentForge 2026