에이전트 강화
게시자가 제공하는 설치 방식입니다. PlugMCP 엔드포인트가 아닙니다.
원격 URL인가요, 내 컴퓨터에서 실행하는 명령인가요? 두 설치 방식의 차이
PlugMCP에서 실행
A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.
실행게시자 제공
OpenTrustBench is a trust and security verification platform for autonomous AI agents and MCP (Model Context Protocol) servers. It scans your codebase for vulnerabilities, maps findings to OWASP Agentic AI Top 10 and OWASP LLM Top 10 2025, generates a verifiable with a letter grade, and provides a for your README.
Trust & security scanner for AI agents and MCP servers — OWASP-mapped findings, Trust Cards (A–F grades), SARIF + CI gate. Free CLI, zero telemetry.
Local analysis, no OpenTrustBench telemetry. Dependency auditing uses the npm registry. No account required.
# Scan a local folder, MCP server, or Agent Skill
npx @opentrustbench/cli scan ./my-mcp-server
# Scan a GitHub repository
npx @opentrustbench/cli scan https://github.com/owner/repo
# Scan an npm package
npx @opentrustbench/cli scan some-npm-package --npm
# Fail CI when findings meet a severity threshold
npx @opentrustbench/cli scan ./my-mcp-server --fail-on high
# Run the OWASP Agentic Top 10 Adversarial Attack Suite
npx @opentrustbench/cli attack ./my-mcp-server
# Evaluate workflow reliability
npx @opentrustbench/cli eval ./tests/workflow.yaml
Embed your trust score in your README:
[](https://www.opentrustbench.com/r/self-packages-cli.html)
This tells buyers, auditors, and AI hosts that your agent has been verified.
opentrustbench at a local directory, GitHub repo, or npm packagenpm audit integration for lockfile-based vulnerability detection--fail-on severity gate for pipeline enforcementattack is static-heuristic: it re-analyzes scan findings + permissions. No payloads execute.eval is simulation mode: suites are parsed and validated; nothing runs, costs/durations stay 0.Need a human pass over your results? Request a review — manual result triage plus a remediation plan, scoped per target. The CLI stays the product and is free forever.
packages/
core/ — Detection engines, OWASP rules, trust scoring, attack analysis
cli/ — Terminal CLI with SARIF export and badge generation
action/ — GitHub Action for CI/CD pipelines
web/ — Landing page and interactive demo
badges/ — Shareable grade badge SVGs
examples/ — Vulnerable and secure test fixtures
scripts/ — Verification and demo scripts
docs/ — Research, registry report, and versioned roadmap (ROADMAP.md)
npm install # installs + builds via prepare
npm test # build + 28 unit tests
node scripts/verify-demos.mjs # end-to-end smoke checks
Apache 2.0 © 2026 Eulogik
Trust & security scanner for AI agents and MCP servers — OWASP-mapped findings, Trust Cards (A–F grades), SARIF + CI gate. Free CLI, zero telemetry.
도구
아직 도구 목록이 없습니다. 원격 서버는 첫 상태 확인 후에 도구 목록이 생깁니다.
FAQ
이 페이지에서 Cursor, Claude Desktop, Claude Code 또는 VS Code용 stdio 설정을 복사합니다. PlugMCP 프록시가 아니라 게시자의 설치 방식을 사용합니다.
이 레코드에는 필수 환경 변수가 등록되어 있지 않습니다.
OpenTrustBench은(는) stdio를 통해 로컬에서 실행됩니다.
마지막 확인: 2026-11-10. Trust & security scanner for AI agents and MCP servers — OWASP-mapped findings, Trust Cards (A–F grades), SARIF + CI gate. Free CLI, zero telemetry.