# OpenTrustBench > Trust & security scanner for AI agents and MCP servers — OWASP-mapped findings, Trust Cards (A–F grades), SARIF + CI gate. Free CLI, zero telemetry. - **Type:** MCP server - **Install:** `agentstack add mcp-eulogik-opentrustbench` - **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior - **Seller:** [eulogik](https://agentstack.voostack.com/s/eulogik) - **Installs:** 0 - **Category:** [Developer Tools](https://agentstack.voostack.com/c/developer-tools) - **Latest version:** 0.1.0 - **License:** Apache-2.0 - **Upstream author:** [eulogik](https://github.com/eulogik) - **Source:** https://github.com/eulogik/OpenTrustBench - **Website:** https://opentrustbench.com ## Install ```sh agentstack add mcp-eulogik-opentrustbench ``` Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent. ## About Self-scan of packages/cli at HEAD: A (90/100), 0 findings, minimal scope. Reproduce: node packages/cli/dist/index.js scan packages/cli --quiet Trust & Security for AI Agents & MCP Servers OpenTrustBench Scan your AI agent or MCP server for vulnerabilities. Get a verifiable Trust Card with a public grade badge. --- ## What is OpenTrustBench? OpenTrustBench is a trust and security verification platform for autonomous AI agents and MCP (Model Context Protocol) servers. It scans your codebase for vulnerabilities, maps findings to [OWASP Agentic AI Top 10](https://owasp.org/) and [OWASP LLM Top 10 2025](https://owasp.org/), generates a verifiable **Trust Card** with a letter grade, and provides a **shareable badge** for your README. **Zero data retention.** Everything runs locally on your machine. No telemetry. No account required. ## Quick Start ```bash # Scan a local folder, MCP server, or Agent Skill npx @opentrustbench/cli scan ./my-mcp-server # Scan a GitHub repository npx @opentrustbench/cli scan https://github.com/owner/repo # Scan an npm package npx @opentrustbench/cli scan some-npm-package --npm # Fail CI when findings meet a severity threshold npx @opentrustbench/cli scan ./my-mcp-server --fail-on high # Run the OWASP Agentic Top 10 Adversarial Attack Suite npx @opentrustbench/cli attack ./my-mcp-server # Evaluate workflow reliability npx @opentrustbench/cli eval ./tests/workflow.yaml ``` ## Install | Channel | Command | Status | |---------|---------|--------| | **npm** | `npm install -g @opentrustbench/cli` | v0.1.3 live ([package](https://www.npmjs.com/package/@opentrustbench/cli)) | | **npx** | `npx @opentrustbench/cli scan .` | No install needed | | **PyPI** | `pip install opentrustbench` | v0.1.3 live ([package](https://pypi.org/project/opentrustbench/)) — requires Node 18+ and the npm CLI engine | | **Homebrew** | `brew tap eulogik/opentrustbench && brew install opentrustbench` | v0.1.3 live ([tap](https://github.com/eulogik/homebrew-opentrustbench)) | | **Docker** | `docker run --rm -v $(pwd):/workspace eulogik/opentrustbench scan .` | v0.1.3 + `latest` live ([Hub](https://hub.docker.com/r/eulogik/opentrustbench)) | | **VS Code** | `code --install-extension eulogik.opentrustbench` | v0.1.3 live ([Marketplace](https://marketplace.visualstudio.com/items?itemName=eulogik.opentrustbench)) | | **GitHub Action** | `- uses: eulogik/opentrustbench-action@v0.1.3` ([repo](https://github.com/eulogik/opentrustbench-action)) | v0.1.3 live ([Marketplace](https://github.com/marketplace/actions/opentrustbench)) | | **Source** | `git clone https://github.com/eulogik/OpenTrustBench.git && cd OpenTrustBench && npm install` | Always current | ## What You Get | Output | Description | |--------|-------------| | **Trust Card** | Machine-readable credential (`opentrustbench/trust-card/v1`) with grade, score, findings, and permissions | | **SARIF Report** | Industry-standard format for GitHub Security tab integration | | **Markdown Report** | Human-readable audit report for compliance and review | | **Grade Badge** | Shareable SVG badge linking to a public report page ([example](https://www.opentrustbench.com/badge/a.svg), [registry](https://www.opentrustbench.com/r/)) | ## Grade Badge Embed your trust score in your README: ```markdown [](https://www.opentrustbench.com/r/self-packages-cli.html) ``` This tells buyers, auditors, and AI hosts that your agent has been verified. ## How It Works 1. **Scan** — Point `opentrustbench` at a local directory, GitHub repo, or npm package 2. **Grade** — Receive a Trust Card with a letter grade (A–F) and security score (0–100) 3. **Share** — Embed your badge and link to the detailed report ## Features - **8 detection rules** across shell injection, secret leaks, prompt injection, tool exploitation, and more - **OWASP mapping** — Every finding tagged to OWASP Agentic Top 10 (ASI01–ASI10) and LLM Top 10 2025 (LLM01–LLM10) - **Permission manifest** — Automatic extraction and scoping of agent permissions - **Dependency audit** — `npm audit` integration for lockfile-based vulnerability detection - **SARIF output** — Native GitHub Code Scanning integration - **CI integration** — `--fail-on` severity gate for pipeline enforcement - **GitHub Action** — Drop-in composite action for workflows - **GitHub URL detection** — Scan any public repo by URL - **Compliance helpers** — Permission manifests and audit trails to attach to an EU AI Act review (evidence input, not a certification) ## What the scanner is (and isn't) - **8-rule static suite**, OWASP-mapped (Agentic ASI01–ASI10, LLM LLM01–LLM10). Regex-based today — no AST yet. - **`attack` is static-heuristic**: it re-analyzes scan findings + permissions. No payloads execute. - **`eval` is simulation mode**: suites are parsed and validated; nothing runs, costs/durations stay 0. - **Not a certification.** The Trust Card is a CI-grade credential, not a pentest or legal verdict. ## Expert reviews Need a human pass over your results? [Request a review](https://github.com/eulogik/OpenTrustBench/issues/new) — manual result triage plus a remediation plan, scoped per target. The CLI stays the product and is free forever. | Tier | Price | What You Get | |------|-------|-------------| | **CLI** | Free | Unlimited local scans, Trust Card, badge, OWASP findings, SARIF, CI gate | | **Expert review** | Scoped per target | Everything in CLI + manual triage, remediation plan, debrief call | | **Enterprise** | Custom | Everything above + custom rules, evidence helpers, priority support | ## Monorepo Structure ``` packages/ core/ — Detection engines, OWASP rules, trust scoring, attack analysis cli/ — Terminal CLI with SARIF export and badge generation action/ — GitHub Action for CI/CD pipelines web/ — Landing page and interactive demo badges/ — Shareable grade badge SVGs examples/ — Vulnerable and secure test fixtures scripts/ — Verification and demo scripts docs/ — Research, registry report, and versioned roadmap (ROADMAP.md) ``` ## Build & Test ```bash npm install # installs + builds via prepare npm test # build + 28 unit tests node scripts/verify-demos.mjs # end-to-end smoke checks ``` ## Standards - **OWASP Agentic AI Top 10** (ASI01–ASI10) — Published December 2025 - **OWASP LLM Top 10 2025** (LLM01–LLM10) - **EU AI Act** Article 50 transparency obligations (enforceable August 2, 2026) - **SARIF 2.1.0** for GitHub Code Scanning integration ## License [Apache 2.0](LICENSE) © 2026 [Eulogik](https://eulogik.com) --- Website · GitHub · npm · PyPI · Homebrew · Eulogik · Contact ## Source & license This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code. - **Author:** [eulogik](https://github.com/eulogik) - **Source:** [eulogik/OpenTrustBench](https://github.com/eulogik/OpenTrustBench) - **License:** Apache-2.0 - **Homepage:** https://opentrustbench.com Install and usage instructions live in the source repository linked above. ## Pricing - **Free** — Free ## Security capabilities Automated source analysis of v0.1.0 — what this tool can access: - **Network access:** no - **Filesystem access:** no - **Shell / process execution:** no - **Environment & secrets:** no - **Dynamic code execution:** no *"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.* ## Versions - **0.1.0** — security scan: passed — Imported from the upstream source. ## Links - Listing page: https://agentstack.voostack.com/l/mcp-eulogik-opentrustbench - Seller: https://agentstack.voostack.com/s/eulogik - Browse the marketplace: https://agentstack.voostack.com/browse --- Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.