io.github.New1Direction/trust-oracle

skills: {'id': 'grade_mcp_server', 'name': 'grade_mcp_server', 'description': 'Independently grade an MCP server (A–F) BEFORE connecting an agent to it. Returns spec-conformance, security (OWASP MCP Top 10), reliability, tool-hygiene and transparency sub-scores plus a connect/caution/avoid recommendation. Audited by wmcp.sh; the grade is free and never for sale.', 'tags': [], 'examples': None, 'input_modes': None, 'output_modes': None}, {'id': 'check_mcp_drift', 'name': 'check_mcp_drift', 'description': "Check whether an MCP server's tool definitions have changed since it was last trusted (rug-pull / schema-drift detection, the CVE-2025-54136 class). Returns how long the tool surface has been stable, how many times it has changed, and the last change. Use after approval to detect post-trust mutation.", 'tags': [], 'examples': None, 'input_modes': None, 'output_modes': None}, {'id': 'verify_before_execute', 'name': 'verify_before_execute', 'description': 'Verify an MCP server immediately BEFORE you execute any of its tools. Combines the continuously-watched trust grade and live drift status into a single connect/caution/avoid verdict (ok | caution | drifted | failing | ungraded), so you can gate the call in one step. Free, read-tier. The grade is independent and never for sale.', 'tags': [], 'examples': None, 'input_modes': None, 'output_modes': None}; uptime_30d 1.0%; p95 445.1ms; conformance: pass

How to connect

https://wmcp.sh/mcp/trust

curl -X POST https://wmcp.sh/mcp/trust \
  -H 'Content-Type: application/json' \
  -H 'Accept: application/json, text/event-stream' \
  -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{}}'