Security

ToolCheck by M8ven

by M8ven Inc.

Overview

ToolCheck is M8ven's trust layer for the MCP ecosystem. Give it a GitHub URL or npm package name and it returns an independent trust score (0–100) and a clear verdict (Trusted / Caution / Concern), backed by static code analysis, runtime behavioral observation in a sandbox, CVE scanning, and a semantic check comparing the tool's declared behavior against what its code actually does — catching the gap between "read-only market data" and code that can move your funds.

Tools

check_publisher

ChatGPT

Look up aggregate "operator pattern" signals for a GitHub publisher (or any MCP's owner). Returns MCP count under that publisher, grade distribution, median trust, shared wallet-grade env vars across their MCPs, risk-keyword density, and a 0-100 concerning_score with machine-detected reasons. Use when a user asks about a publisher across multiple MCPs ("are all of this org's tools sketchy?") or to investigate a low-grade MCP's family.

check_tool

ChatGPT

Get the M8ven trust score for any MCP server by its GitHub URL or npm package name. Returns trust_score (0-100), verdict (green/yellow/red), verdict_reason, top findings, CVE status, and freshness.

compare_tools

ChatGPT

Compare 2–5 MCP servers side by side by trust score. Use when the user asks "which Notion/Slack/X MCP should I pick?" or otherwise wants to evaluate options. Returns a ranked list with trust_score and verdict_label for each.

recommend_alternatives

ChatGPT

Given an MCP server with a low trust score, return up to 3 higher-trust alternatives in the same category. Useful when an MCP is graded "Concern" or below 60 and the user wants a safer option. Category is inferred from the source MCP's name and description; pass an explicit category hint to override.

report_concern

ChatGPT

Report a concern about an MCP — e.g. capability mismatch, false positive, broken behaviour, spam. Triggers a re-evaluation of the MCP in our next scoring cycle.

search_tools

ChatGPT

Search M8ven's indexed MCP catalogue. Find scored MCPs by name or description, optionally filtered by minimum trust score or source registry. Returns a ranked list with grades and detail URLs.

Links

Documentation ↗Privacy Policy ↗

App Stats

Tools

ChatGPT

Platforms