Trustabl runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 9 Oct 2026.
Find and fix reliability and safety gaps in agent code, across nine agent SDKs.
What the code does
We read the source, 2 d ago · rules ccca72095570
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
full := filepath.Join(manifest.RepoRoot, c.Path)
bundledSecretRe = regexp.MustCompile(`(?i)gh\s+auth|printenv|\$(?:AWS|GH|GITHUB|OPENAI|ANTHROPIC|HF|NPM|SLACK|GOOGLE|GCP|AZURE)[A-Z0-9_]*|\bid_rsa\b|\bcredentials\b|\.aws/|\.ssh/|\.netrc\b|access[_-]?key|secret[_-]?key|api[_-]?key`)
bundledSecretRe = regexp.MustCompile(`(?i)gh\s+auth|printenv|\$(?:AWS|GH|GITHUB|OPENAI|ANTHROPIC|HF|NPM|SLACK|GOOGLE|GCP|AZURE)[A-Z0-9_]*|\bid_rsa\b|\bcredentials\b|\.aws/|\.ssh/|\.netrc\b|access[_-]?key|secret[_-]?key|api[_-]?key`)
{"mediaType":"application/vnd.dev.sigstore.bundle.v0.3+json","verificationMaterial":{"certificate":{"rawBytes":"MIIDNzCCArygAwIBAgIUI84qD4Tou9m2b7j0s1zOY4Q64ecwCgYIKoZIzj0EAwMwNzEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MR4wHAYDVQQDExVzaWdzdG9yZS1pbnRlcm1lZGlhdGUwHhcNMjYwNzA2MjIzNzA4WhcNMjYw…
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
This code can reach further than it looks
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Alternatives to Trustabl
same job, measured the same wayLint MCP tool schemas for cross-client compatibility and agent preflight safety.
Compare domain prices across 145+ registrars and 1,100+ TLDs, find promo codes, check availability.
One identity across Claude Code, Codex, Cursor, Gemini, Windsurf: shared inbox and handoffs.
Agent supply-chain security, scanner consensus, x402 reliability, and commerce MCP tools.
Fast semantic code search for AI agents — find symbols, references, and callers across any codebase
Analyze code quality, security issues, and coverage across repositories
Production readiness for vibe-coded apps. 52 checks for security, reliability, and performance.
Enterprise certification for codebases with multi-agent security, reliability, and quality audits
Trustabl — questions
Answers built from our own checks of this server.