Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "trust-tools": {
      "type": "http",
      "url": "https://obeliskgate.com/mcp"
    }
  }
}

claude mcp add --transport http trust-tools https://obeliskgate.com/mcp

[mcp_servers.trust-tools]
url = "https://obeliskgate.com/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "trust-tools": {
      "type": "remote",
      "url": "https://obeliskgate.com/mcp",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "trust-tools": {
      "type": "http",
      "url": "https://obeliskgate.com/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=trust-tools&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vb2JlbGlza2dhdGUuY29tL21jcCJ9"
}

{
  "servers": {
    "trust-tools": {
      "type": "http",
      "url": "https://obeliskgate.com/mcp"
    }
  }
}

{
  "mcpServers": {
    "trust-tools": {
      "httpUrl": "https://obeliskgate.com/mcp"
    }
  }
}

extensions:
  "trust-tools":
    enabled: true
    name: "trust-tools"
    type: streamable_http
    uri: "https://obeliskgate.com/mcp"
    timeout: 300

Quality 68 / 100needs work

protocol75 · weight 25

warn
protocol.modernnewest supported version is 2025-06-18; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
n/a
protocol.statelessonly applies to 2026-07-28 servers
pass
protocol.transportstreamable HTTP
n/a
protocol.list_ttlonly applies to 2026-07-28 servers

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene71 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
fail
tools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
fail
tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: gate_status (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); verify_token (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); verify_agent_run_proof (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
pass
tools.token_costabout 939 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stability50 · weight 15

pass
stability.changes2 tool changes in 30 days
fail
stability.rug_pull2 tools kept their name but changed most of their description in 30 days; review before trusting them

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

8 tools, about 939 tokens to load them all · tool set 85a8546f42cf · tools last changed 2026-10-09 · checked 2026-10-20 09:31 UTC

Tool changes

2026-10-09transparency_headchangeddescriptionmeaning changed
before
Read the current signed transparency head of Obelisk's tamper-evident receipt ledger — pin it and compare later to prove history only extends. Same data as /.well-known/obelisk-transparency.json.
after · 43% of words in common
Read the current signed transparency head of Obelisk's tamper-evident receipt ledger. Save headAnchorHash with anchorCount and compare later: the count must never go down, and the head at a saved count must not change. No consistency proofs are published, so this cannot show a later head extends a saved one. Same data as /.well-known/obelisk-transparency.json.
2026-10-04verify_agent_run_proofchangeddescription, input schemameaning changed
before
Verify the structural integrity, agent binding, delegation continuity, and commitments of an Obelisk action-scoped run proof. Does not reveal or infer raw task data.
after · 20% of words in common
Verify an Obelisk run proof. Pass run_proof_token, the token Obelisk signs at POST /api/agent-proof/run: the tool checks Obelisk's signature against its published keys, that the named agent is active now with the same key that answered the run challenge, and which delegation hops matched the owner's registry when the token was signed. A bare run_proof envelope is only checked for internal consistency and is never reported as verified, because anyone can build one. Reports the envelope's commitment scheme: a legacy v1 envelope, whose hashes are unsalted, carries the warning unsalted-v1. Does not reveal or infer raw task data.

Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 80 / 100

no-repository

provenance55

liveness100

freshness85

hygiene80

+dns-namespace +website +reachable +uptime-100% ~updated-63d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://obeliskgate.com/mcp` streamable-http	none	yes	100%	153 ms	2025-06-18	2026-10-20

Tools (8)

`explain_rating`	Explain what an Obelisk Rating number means: its trust band, how the public scan scores, and what typically moves a score. Deterministic by default; pass narrate:true for an additional one-line model-written narrative (cached, public-scope, never required). Pure function of the number — no data is read.
`gate_status`	Read the Gate's public liveness facts: issuer, served code revision, OIDC availability, and supported protocols. No posture internals.
`get_agent_proof`	Read an Obelisk agent's public proof vector by opaque proof id. Returns independent claims with freshness and scope; never a scalar trust score or a claim of non-humanness.
`get_org_rating`	Read the public Obelisk Rating (0-100 score, trust band, and trend) for a registered organization by its slug.
`scan_trust`	Run Obelisk's public trust scan on an https URL — TLS and security-header posture, scored as an Obelisk Rating. Read-only, SSRF-guarded.
`transparency_head`	Read the current signed transparency head of Obelisk's tamper-evident receipt ledger. Save headAnchorHash with anchorCount and compare later: the count must never go down, and the head at a saved count must not change. No consistency proofs are published, so this cannot show a later head extends a saved one. Same data as /.well-known/obelisk-transparency.json.
`verify_agent_run_proof`	Verify an Obelisk run proof. Pass run_proof_token, the token Obelisk signs at POST /api/agent-proof/run: the tool checks Obelisk's signature against its published keys, that the named agent is active now with the same key that answered the run challenge, and which delegation hops matched the owner's registry when the token was signed. A bare run_proof envelope is only checked for internal consistency and is never reported as verified, because anyone can build one. Reports the envelope's commitment scheme: a legacy v1 envelope, whose hashes are unsalted, carries the warning unsalted-v1. Does not reveal or infer raw task data.
`verify_token`	Verify that a JSON Web Token was minted by this Obelisk Gate (ES256, correct issuer) and report its type, subject, assurance, and principal. Never returns secrets.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "com.obeliskgate/trust-tools",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-07-09/server.schema.json",
  "remotes": [
    {
      "url": "https://obeliskgate.com/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "1.0.0",
  "websiteUrl": "https://obeliskgate.com/mcp",
  "description": "Website security ratings, token verification, and tamper-evident ledger heads from Obelisk Gate."
}