OpenTrustBench

Self-scan of packages/cli at HEAD: A (90/100), 0 findings, minimal scope. Reproduce: node packages/cli/dist/index.js scan packages/cli --quiet

Trust & Security for AI Agents & MCP Servers

OpenTrustBench

Scan your AI agent or MCP server for vulnerabilities. Get a verifiable Trust Card with a public grade badge.

---

What is OpenTrustBench?

OpenTrustBench is a trust and security verification platform for autonomous AI agents and MCP (Model Context Protocol) servers. It scans your codebase for vulnerabilities, maps findings to OWASP Agentic AI Top 10 and OWASP LLM Top 10 2025, generates a verifiable Trust Card with a letter grade, and provides a shareable badge for your README.

Zero data retention. Everything runs locally on your machine. No telemetry. No account required.

Quick Start

# Scan a local folder, MCP server, or Agent Skill
npx @opentrustbench/cli scan ./my-mcp-server

# Scan a GitHub repository
npx @opentrustbench/cli scan https://github.com/owner/repo

# Scan an npm package
npx @opentrustbench/cli scan some-npm-package --npm

# Fail CI when findings meet a severity threshold
npx @opentrustbench/cli scan ./my-mcp-server --fail-on high

# Run the OWASP Agentic Top 10 Adversarial Attack Suite
npx @opentrustbench/cli attack ./my-mcp-server

# Evaluate workflow reliability
npx @opentrustbench/cli eval ./tests/workflow.yaml

Install

| Channel | Command | Status | |---------|---------|--------| | npm | npm install -g @opentrustbench/cli | v0.1.3 live (package) | | npx | npx @opentrustbench/cli scan . | No install needed | | PyPI | pip install opentrustbench | v0.1.3 live (package) — requires Node 18+ and the npm CLI engine | | Homebrew | brew tap eulogik/opentrustbench && brew install opentrustbench | v0.1.3 live (tap) | | Docker | docker run --rm -v $(pwd):/workspace eulogik/opentrustbench scan . | v0.1.3 + latest live (Hub) | | VS Code | code --install-extension eulogik.opentrustbench | v0.1.3 live (Marketplace) | | GitHub Action | - uses: eulogik/opentrustbench-action@v0.1.3 (repo) | v0.1.3 live (Marketplace) | | Source | git clone https://github.com/eulogik/OpenTrustBench.git && cd OpenTrustBench && npm install | Always current |

What You Get

| Output | Description | |--------|-------------| | Trust Card | Machine-readable credential (opentrustbench/trust-card/v1) with grade, score, findings, and permissions | | SARIF Report | Industry-standard format for GitHub Security tab integration | | Markdown Report | Human-readable audit report for compliance and review | | Grade Badge | Shareable SVG badge linking to a public report page (example, registry) |

Grade Badge

Embed your trust score in your README:

[](https://www.opentrustbench.com/r/self-packages-cli.html)

This tells buyers, auditors, and AI hosts that your agent has been verified.

How It Works

1. Scan — Point opentrustbench at a local directory, GitHub repo, or npm package
2. Grade — Receive a Trust Card with a letter grade (A–F) and security score (0–100)
3. Share — Embed your badge and link to the detailed report

Features

• 8 detection rules across shell injection, secret leaks, prompt injection, tool exploitation, and more
• OWASP mapping — Every finding tagged to OWASP Agentic Top 10 (ASI01–ASI10) and LLM Top 10 2025 (LLM01–LLM10)
• Permission manifest — Automatic extraction and scoping of agent permissions
• Dependency audit — npm audit integration for lockfile-based vulnerability detection
• SARIF output — Native GitHub Code Scanning integration
• CI integration — --fail-on severity gate for pipeline enforcement
• GitHub Action — Drop-in composite action for workflows
• GitHub URL detection — Scan any public repo by URL
• Compliance helpers — Permission manifests and audit trails to attach to an EU AI Act review (evidence input, not a certification)

What the scanner is (and isn't)

• 8-rule static suite, OWASP-mapped (Agentic ASI01–ASI10, LLM LLM01–LLM10). Regex-based today — no AST yet.
• attack is static-heuristic: it re-analyzes scan findings + permissions. No payloads execute.
• eval is simulation mode: suites are parsed and validated; nothing runs, costs/durations stay 0.
• Not a certification. The Trust Card is a CI-grade credential, not a pentest or legal verdict.

Expert reviews

Need a human pass over your results? Request a review — manual result triage plus a remediation plan, scoped per target. The CLI stays the product and is free forever.

| Tier | Price | What You Get | |------|-------|-------------| | CLI | Free | Unlimited local scans, Trust Card, badge, OWASP findings, SARIF, CI gate | | Expert review | Scoped per target | Everything in CLI + manual triage, remediation plan, debrief call | | Enterprise | Custom | Everything above + custom rules, evidence helpers, priority support |

Monorepo Structure

packages/
  core/     — Detection engines, OWASP rules, trust scoring, attack analysis
  cli/      — Terminal CLI with SARIF export and badge generation
  action/   — GitHub Action for CI/CD pipelines
web/        — Landing page and interactive demo
badges/     — Shareable grade badge SVGs
examples/   — Vulnerable and secure test fixtures
scripts/    — Verification and demo scripts
docs/       — Research, registry report, and versioned roadmap (ROADMAP.md)

Build & Test

npm install          # installs + builds via prepare
npm test             # build + 28 unit tests
node scripts/verify-demos.mjs  # end-to-end smoke checks

Standards

• OWASP Agentic AI Top 10 (ASI01–ASI10) — Published December 2025
• OWASP LLM Top 10 2025 (LLM01–LLM10)
• EU AI Act Article 50 transparency obligations (enforceable August 2, 2026)
• SARIF 2.1.0 for GitHub Code Scanning integration

License

[Apache 2.0](LICENSE) © 2026 Eulogik

---

Website · GitHub · npm · PyPI · Homebrew · Eulogik · Contact

Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

• Author: eulogik
• Source: eulogik/OpenTrustBench
• License: Apache-2.0
• Homepage: https://opentrustbench.com

Install and usage instructions live in the source repository linked above.