{"name":"io.github.trustlists/mcp","slug":"trustlists-mcp","title":"trustlists","description":"Find public vendor trust centers, browse listed frameworks, and map project dependencies.","url":"https://mcp.market/server/trustlists-mcp","rating":null,"grade":"A","score":91,"certified":false,"status":"active","category":"maps","tags":["maps"],"presence":{"score":25,"stars":0,"forks":0,"downloads_week":30,"last_push_at":"2026-08-30T10:18:48.000Z","license":"Apache-2.0"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/trustlists/trustlists-plugin","website":"https://trustlists.org/mcp/","version":"0.2.1","remotes":[],"packages":[{"registryType":"npm","identifier":"@trustlists/mcp","version":"0.2.1","transport":{"type":"stdio"}}],"tools":[{"name":"trustlists_audit_dependencies","description":"Scan a project's dependency manifests (package.json, requirements.txt, go.mod, Cargo.toml, Gemfile, composer.json, pyproject.toml, Pipfile) and map likely vendors to public trust center records. Returns documentation-visibility data, not a security score. Use when inventorying third-party services or preparing vendor review.","write_action":false,"price_micros":0,"input_schema":null},{"name":"trustlists_browse","description":"Browse the public trustlists directory by exact trust center platform, listed framework, or CSA STAR level. Use for questions like \"show SafeBase-hosted vendors\", \"find entries listing ISO 27001\", or \"list CSA STAR Level 2 companies\". Results are directory metadata, not security ratings.","write_action":false,"price_micros":0,"input_schema":null},{"name":"trustlists_lookup","description":"Look up one company in the public trustlists directory by exact website domain. Returns its trust center URL, platform, listed frameworks, CSA STAR level, verification date, and directory page. Directory metadata is a discovery aid, not proof of compliance.","write_action":false,"price_micros":0,"input_schema":null},{"name":"trustlists_search","description":"Search thousands of public trust center records by company name or website domain. Returns directory matches with trust center URLs, platforms, listed frameworks, CSA STAR levels, and source pages. Use when the user gives a company name or partial domain.","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":91,"grade":"A","scanned_at":"2026-09-20T20:58:09.961Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-20T20:58:09.867Z","components":{"code":{"score":25,"max":25,"notes":["13 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 21 days ago"]},"identity":{"score":7,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[],"inputs":{"packages":[{"registryType":"npm","identifier":"@trustlists/mcp","version":"0.2.1","found":true,"license":"Apache-2.0","hasInstallScripts":false,"dependencyCount":2,"publishedAt":"2026-08-30T08:43:29.918Z","repositoryUrl":"git+https://github.com/trustlists/trustlists-plugin.git","weeklyDownloads":30}],"repo":{"found":true,"owner":"trustlists","repo":"trustlists-plugin","archived":false,"pushedAt":"2026-08-30T10:18:48Z","stars":0,"forks":0,"openIssues":6,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/240602113?v=4","ownerCreatedAt":"2025-10-28T00:19:21Z","license":"Apache-2.0"},"icon":{"url":"https://avatars.githubusercontent.com/u/240602113?v=4&s=128","source":"github"},"presence":{"stars":0,"forks":0,"downloadsWeek":30,"license":"Apache-2.0","lastPushAt":"2026-08-30T10:18:48.000Z","score":25}}}},"grade_history":[],"reviews":[]}