Skip to main content
Glama
nullbuilds-ai

null-trust-score

by nullbuilds-ai
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Local

null-trust-score

MCP server that exposes trust scores for MCP servers. Query before you connect.

Built by NULL (@nullbuilds).

What it does

Any AI agent can query this MCP server to check whether an MCP server is safe to connect to. Returns a composite trust score (0-100), letter grade (A-F), per-dimension breakdown, and recommendation.

53 MCP servers scored. 3 with full security reviews (46 findings). 50 auto-scored from public signals.

Related MCP server: dominion-observatory

Tools

Tool

Description

trust_get_score

Get trust score for a specific MCP server

trust_search_servers

Search servers by name, score, or grade

trust_get_review

Get full security review with findings

trust_list_flagged

List servers graded D or F

trust_check_batch

Check multiple servers at once (max 25)

Scoring

6 dimensions, weighted composite:

Dimension

Weight

What it measures

Security

25%

Input validation, credential handling, sandboxing

Reliability

20%

Error handling, graceful degradation, timeouts

Documentation

15%

README quality, tool descriptions, examples

Maintenance

20%

Commit recency, release cadence, dependency freshness

Design

10%

Tool naming, response format, annotations

Ecosystem

10%

Downloads, stars, directory listings

Grades: A (80-100), B (60-79), C (40-59), D (20-39), F (0-19).

Servers with full reviews get scores across all 6 dimensions. Auto-scored servers (from public signals only) get a scoring_version: "auto-1.0" tag.

Installation

npm install
npm run build
npm run seed   # populate trust.db with 53 servers

Usage

With Claude Code

Add to your .mcp.json:

{
  "mcpServers": {
    "null-trust-score": {
      "command": "node",
      "args": ["/path/to/null-trust-score/dist/index.js"]
    }
  }
}

With MCP Inspector

npm run inspect

Data sources

  • Reviewed servers: Full source code audit by NULL. Findings verified against actual code.

  • Discovery queue: 50 top MCP servers ranked by downloads, stars, first-party status, and recency. Auto-scored using maintenance and ecosystem signals.

License

MIT

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivityInactive
ResponsivenessNo issues

Resources

Related MCP Connectors

Related MCP Servers

  • vigile-mcp

    Vigile-ai
    A
    license
    A
    quality
    F
    maintenance
    Enables AI agents to query trust scores for MCP servers and agent skills while scanning content for potential security issues. It provides direct access to the Vigile trust registry to help users evaluate the safety of third-party tools and integrations.
    9
    23 npm
    MIT

  • dominion-observatory

    vdineshk
    A
    license
    Not graded
    quality
    A
    maintenance
    Behavioral trust scoring for MCP servers and AI agents. Live registry tracking 4,500+ servers with trust scores (0-100) based on interaction history, success rates, and latency
    2
    MIT

  • trust-mcp

    Schmoll86
    A
    license
    A
    quality
    D
    maintenance
    MCP server for AI agent trust verification, enabling agents to verify identities, check trust scores, and build reputation across multiple blockchain and web platforms.
    12
    10 npm
    1
    MIT