AgentAvow Trust
com.agentavow/agentavow-trustVersion 0.6.5Signed, offline-verifiable safety scores for the MCP servers, packages & tools an agent connects to
Status
Responds378 msAnswered our handshake without sign-in.- Last checked
- Nov 14, 2026, 13:45 UTC
- Latency
- 378 ms
- Remotes responding
- 1 of 1
- Sign-in
- No sign-in
- Hosting
- Hosted outside the EU (detected)
- Registry data as of
- Nov 14, 2026, 22:14 UTC
Data from the official MCP Registry, checked by run.zero. How we check
Connect
Streamable HTTP
https://agentavow.com/mcpResponds378 msNo sign-in
Claude Code
claude mcp add --transport http agentavow-trust https://agentavow.com/mcpClaude Desktop and claude.ai
Settings > Connectors > Add custom connector
Name: agentavow-trust
Remote MCP server URL: https://agentavow.com/mcpCursor
{
"mcpServers": {
"agentavow-trust": {
"url": "https://agentavow.com/mcp"
}
}
}VS Code
code --add-mcp '{"name":"agentavow-trust","type":"http","url":"https://agentavow.com/mcp"}'Streamable HTTP
pypi: agentavow-trust 0.6.5Package only
PyPI (uvx)
claude mcp add agentavow-trust -- uvx agentavow-trust==0.6.5Built your own server? run.zero hosts MCP servers on European infrastructure.
Tools
8 tools
Read-only | Idempotent | Open world | ||
|---|---|---|---|---|
about_agentavowWhat AgentAvow is, which tool to use for what, how to read a verdict, and example scans. Call this for an overview or when getting started. No input, read-only. | No | Yes | Yes | No |
check_interaction_safetyCheck whether it is safe to interact with another agent by trust threshold. Thresholds: delegate 0.6, trade 0.5, collaborate 0.4, follow 0.1. Returns is_safe, risk_level, the score, and a recommendation. Read-only, no auth. | No | Yes | Yes | Yes |
get_trust_badgeGet an embeddable AgentAvow trust badge (SVG) for an entity, with ready-to-paste Markdown and HTML. The badge auto-updates as the score changes. Read-only, no auth. | No | Yes | Yes | Yes |
lookup_identityLook up an AgentAvow entity by W3C DID or display name. Returns the entity's id, name, type, trust score and tier. Read-only, no auth. Use to resolve an identity before checking its trust. | No | Yes | Yes | Yes |
scan_mcp_serverScan a live MCP server's tool definitions for tool-poisoning, prompt-injection, invisible-unicode, and manifest-execution risks before your agent connects to it. Returns one of three answers with its reason (Safe to connect, Review before you connect, or Do not connect), a 0-100 trust score, findings, and a signed attestation. Read-only; calls the agentavow.com public API. | No | Yes | Yes | Yes |
scan_packageScan a published package (npm, PyPI, crates, Docker, or Hugging Face) with AgentAvow. Returns one of three answers with its reason (Safe to connect, Review before you connect, or Do not connect), a 0-100 trust score, an adoption score from real usage (downloads per week), findings with remediation, and a signed attestation. Also reports published advisories that affect the scanned version, the maintainer's deprecation notice, repo-vs-artifact drift (files shipped that aren't in the source), and AgentAvow's behavioral sandbox results when available. Scans the latest version unless `version` (or a pin in the name) names one. Read-only; calls agentavow.com. | No | Yes | Yes | Yes |
scan_repoScan a public GitHub repository with AgentAvow and return whether it is safe for an agent to connect to: one of three answers with its reason (Safe to connect, Review before you connect, or Do not connect), a 0-100 trust score, an adoption score from real usage (stars), the findings behind it (with where and how to fix), and a signed, offline-verifiable attestation. Read-only, no account. Calls the AgentAvow public API at agentavow.com. | No | Yes | Yes | Yes |
verify_trustVerify an AgentAvow entity's trust score. Returns trust_score (0-1), trust_score_pct (0-100), trust_tier, and whether it meets a minimum threshold. Read-only, no auth. Use before interacting with an unknown agent. | No | Yes | Yes | Yes |
Details
- Registry status
- Active
- Published
- Nov 10, 2026
- Updated
- Nov 10, 2026
- Website
- Not given
- Repository
- Not given
- Categories (suggested)
- SecuritySuggested categories are assigned automatically from the registry text and may be wrong. Verified operators can correct them.
- GDPR
- Not declared