Power your agent
Cài đặt từ nhà phát hành. Không phải endpoint của PlugMCP.
Host a copy with our keys and logs.
Chưa có bản phát hành đóng gói nào trong registry. Làm theo README của kho mã.
URL từ xa hay một lệnh trên máy của bạn? Hai cách cài đặt khác nhau thế nào
Chạy trên PlugMCP
A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.
MởTừ nhà phát hành
OpenTrustBench is a trust and security verification platform for autonomous AI agents and MCP (Model Context Protocol) servers. It scans your codebase for vulnerabilities, maps findings to OWASP Agentic AI Top 10 and OWASP LLM Top 10 2025, generates a verifiable with a letter grade, and provides a for your README.
Trust & security scanner for AI agents and MCP servers — OWASP-mapped findings, Trust Cards (A–F grades), SARIF + CI gate. Free CLI, zero telemetry.
Local analysis, no OpenTrustBench telemetry. Dependency auditing uses the npm registry. No account required.
# Scan a local folder, MCP server, or Agent Skill
npx @opentrustbench/cli scan ./my-mcp-server
# Scan a GitHub repository
npx @opentrustbench/cli scan https://github.com/owner/repo
# Scan an npm package
npx @opentrustbench/cli scan some-npm-package --npm
# Fail CI when findings meet a severity threshold
npx @opentrustbench/cli scan ./my-mcp-server --fail-on high
# Run the OWASP Agentic Top 10 Adversarial Attack Suite
npx @opentrustbench/cli attack ./my-mcp-server
# Evaluate workflow reliability
npx @opentrustbench/cli eval ./tests/workflow.yaml
Embed your trust score in your README:
[](https://www.opentrustbench.com/r/self-packages-cli.html)
This tells buyers, auditors, and AI hosts that your agent has been verified.
opentrustbench at a local directory, GitHub repo, or npm packagenpm audit integration for lockfile-based vulnerability detection--fail-on severity gate for pipeline enforcementattack is static-heuristic: it re-analyzes scan findings + permissions. No payloads execute.eval is simulation mode: suites are parsed and validated; nothing runs, costs/durations stay 0.Need a human pass over your results? Request a review — manual result triage plus a remediation plan, scoped per target. The CLI stays the product and is free forever.
packages/
core/ — Detection engines, OWASP rules, trust scoring, attack analysis
cli/ — Terminal CLI with SARIF export and badge generation
action/ — GitHub Action for CI/CD pipelines
web/ — Landing page and interactive demo
badges/ — Shareable grade badge SVGs
examples/ — Vulnerable and secure test fixtures
scripts/ — Verification and demo scripts
docs/ — Research, registry report, and versioned roadmap (ROADMAP.md)
npm install # installs + builds via prepare
npm test # build + 28 unit tests
node scripts/verify-demos.mjs # end-to-end smoke checks
Apache 2.0 © 2026 Eulogik
Trust & security scanner for AI agents and MCP servers — OWASP-mapped findings, Trust Cards (A–F grades), SARIF + CI gate. Free CLI, zero telemetry.
Công cụ
Chưa có danh sách công cụ. Máy chủ từ xa sẽ có danh sách sau lần kiểm tra tình trạng đầu tiên.
Câu hỏi thường gặp
Sao chép cấu hình stdio cho Cursor, Claude Desktop, Claude Code hoặc VS Code trên trang này. Cấu hình dùng bản cài đặt của nhà phát hành, không phải proxy của PlugMCP.
Bản ghi này không liệt kê biến môi trường bắt buộc nào.
OpenTrustBench chạy cục bộ qua stdio.
Kiểm tra lần cuối: 2026-11-10. Trust & security scanner for AI agents and MCP servers — OWASP-mapped findings, Trust Cards (A–F grades), SARIF + CI gate. Free CLI, zero telemetry.