trust-tools

com.obeliskgate/trust-toolsVersion 1.0.0

Website security ratings, token verification, and tamper-evident ledger heads from Obelisk Gate.

Status

Responds357 msNov 14, 2026, 14:08 UTCAnswered our handshake without sign-in.

Registry data may be out of date

We could not refresh it, so this page shows the last copy.

Last checked: Nov 14, 2026, 14:08 UTC
Latency: 357 ms
Remotes responding: 1 of 1
Sign-in: No sign-in
Hosting: Hosted outside the EU (detected)
Registry data as of: Nov 14, 2026, 22:14 UTC

Data from the official MCP Registry, checked by run.zero. How we check

Connect

Streamable HTTP

https://obeliskgate.com/mcpResponds357 msNov 14, 2026, 14:08 UTC

No sign-in

Claude Code

claude mcp add --transport http trust-tools https://obeliskgate.com/mcp

Claude Desktop and claude.ai

1
2
3

Settings > Connectors > Add custom connector
Name: trust-tools
Remote MCP server URL: https://obeliskgate.com/mcp

Cursor

{
  "mcpServers": {
    "trust-tools": {
      "url": "https://obeliskgate.com/mcp"
    }
  }
}

VS Code

code --add-mcp '{"name":"trust-tools","type":"http","url":"https://obeliskgate.com/mcp"}'

Built your own server? run.zero hosts MCP servers on European infrastructure.

Host your own MCP server on run.zero

Tools

10 tools

Tools of trust-tools
	Description		Read-only	Idempotent	Open world
`agent_enrollment_guide`Read how an AI agent enrolls with this Obelisk Gate: the endpoints in order, the fields each takes, which key types this deployment can prove, whether enrollment is switched on, and the current account sign-up posture an approving owner needs. Read-only; no input, no state is changed.	Read how an AI agent enrolls with this Obelisk Gate: the endpoints in order, the fields each takes, which key types this deployment can prove, whether enrollment is switched on, and the current account sign-up posture an approving owner needs. Read-only; no input, no state is changed.	Not declared	Not declared	Not declared	Not declared
`explain_rating`Explain what an Obelisk Rating number means: its trust band, how the public scan scores, and what typically moves a score. Deterministic by default; pass narrate:true for an additional one-line model-written narrative (cached, public-scope, never required). Pure function of the number — no data is read.	Explain what an Obelisk Rating number means: its trust band, how the public scan scores, and what typically moves a score. Deterministic by default; pass narrate:true for an additional one-line model-written narrative (cached, public-scope, never required). Pure function of the number — no data is read.	Not declared	Not declared	Not declared	Not declared
`gate_status`Read the Gate's public liveness facts: issuer, served code revision, OIDC availability, and supported protocols. No posture internals.	Read the Gate's public liveness facts: issuer, served code revision, OIDC availability, and supported protocols. No posture internals.	Not declared	Not declared	Not declared	Not declared
`get_agent_proof`Read an Obelisk agent's public proof vector by opaque proof id. Returns independent claims with freshness and scope; never a scalar trust score or a claim of non-humanness.	Read an Obelisk agent's public proof vector by opaque proof id. Returns independent claims with freshness and scope; never a scalar trust score or a claim of non-humanness.	Not declared	Not declared	Not declared	Not declared
`get_org_rating`Read the public Obelisk Rating (0-100 score, trust band, and trend) for a registered organization by its slug.	Read the public Obelisk Rating (0-100 score, trust band, and trend) for a registered organization by its slug.	Not declared	Not declared	Not declared	Not declared
`pin_tool_manifest`Pin an MCP tool manifest before an agent trusts it. Returns a SHA-256 digest per tool and for the whole catalogue (canonical JSON, every field counts), hidden-text findings (Unicode tag, bidi and zero-width characters) and an injection signal per tool. Pass the digests you stored at approval as expected to detect a changed, added or removed tool. Up to 64 tools in a request body of at most 256 KB. Read-only and stateless; the injection score is one signal, not a guarantee.	Pin an MCP tool manifest before an agent trusts it. Returns a SHA-256 digest per tool and for the whole catalogue (canonical JSON, every field counts), hidden-text findings (Unicode tag, bidi and zero-width characters) and an injection signal per tool. Pass the digests you stored at approval as expected to detect a changed, added or removed tool. Up to 64 tools in a request body of at most 256 KB. Read-only and stateless; the injection score is one signal, not a guarantee.	Not declared	Not declared	Not declared	Not declared
`scan_trust`Run Obelisk's public trust scan on an https URL — TLS and security-header posture, scored as an Obelisk Rating. Read-only, SSRF-guarded.	Run Obelisk's public trust scan on an https URL — TLS and security-header posture, scored as an Obelisk Rating. Read-only, SSRF-guarded.	Not declared	Not declared	Not declared	Not declared
`transparency_head`Read the current signed transparency head of Obelisk's tamper-evident receipt ledger. Save headAnchorHash with anchorCount and compare later: the count must never go down, and the head at a saved count must not change. No consistency proofs are published, so this cannot show a later head extends a saved one. Same data as /.well-known/obelisk-transparency.json.	Read the current signed transparency head of Obelisk's tamper-evident receipt ledger. Save headAnchorHash with anchorCount and compare later: the count must never go down, and the head at a saved count must not change. No consistency proofs are published, so this cannot show a later head extends a saved one. Same data as /.well-known/obelisk-transparency.json.	Not declared	Not declared	Not declared	Not declared
`verify_agent_run_proof`Verify an Obelisk run proof. Pass run_proof_token, the token Obelisk signs at POST /api/agent-proof/run: the tool checks Obelisk's signature against its published keys, that the named agent is active now with the same key that answered the run challenge, and which delegation hops matched the owner's registry when the token was signed. A bare run_proof envelope is only checked for internal consistency and is never reported as verified, because anyone can build one. Reports the envelope's commitment scheme: a legacy v1 envelope, whose hashes are unsalted, carries the warning unsalted-v1. Does not reveal or infer raw task data.	Verify an Obelisk run proof. Pass run_proof_token, the token Obelisk signs at POST /api/agent-proof/run: the tool checks Obelisk's signature against its published keys, that the named agent is active now with the same key that answered the run challenge, and which delegation hops matched the owner's registry when the token was signed. A bare run_proof envelope is only checked for internal consistency and is never reported as verified, because anyone can build one. Reports the envelope's commitment scheme: a legacy v1 envelope, whose hashes are unsalted, carries the warning unsalted-v1. Does not reveal or infer raw task data.	Not declared	Not declared	Not declared	Not declared
`verify_token`Verify that a JSON Web Token was minted by this Obelisk Gate (ES256, correct issuer) and report its type, subject, assurance, and principal. Never returns secrets.	Verify that a JSON Web Token was minted by this Obelisk Gate (ES256, correct issuer) and report its type, subject, assurance, and principal. Never returns secrets.	Not declared	Not declared	Not declared	Not declared

Details

Registry status: Active
Published: Aug 18, 2026
Updated: Aug 18, 2026
Website: https://obeliskgate.com/mcp⁠ (opens in a new tab)
Repository: Not given
Categories (suggested): SecuritySuggested categories are assigned automatically from the registry text and may be wrong. Verified operators can correct them.
GDPR: Not declared

Are you the operator? Claim this listing