Markets
AgentTrust Grades 50 MCP Servers A Through F and Ships the Scoring as a CI Gate With SARIF Output
AgentTrust, posted to Show HN September 9, is an Apache-2.0 scanner (created 2026-08-24, 2 stars, pushed the same day) that produces OWASP-mapped findings and A–F "Trust Cards" for AI agents and MCP servers, with SARIF output and a CI gate, free CLI, zero telemetry. Fifty servers are graded in the initial release. It is early and unproven at this star count, but grading third-party MCP servers on a letter scale is the compliance-vendor shape (Vanta, Drata) applied to a supply chain that currently has no rating at all.
Source
↳ Follow the thread