Skip to content
mcp/skillhub

TrustList MCP Server

by eharainio.github.eharain/trustlistv0.1.1

Search TrustList rankings of software, IT services and B2B firms, and cite them. Read-only, no key.

0Node.jsstdioofficial registry

context tax

pending

security

97/100

cold start

pending

freshness

Active3d ago

Our reading of TrustList, from the data

TrustList is an MCP server from eharain, listed in the official MCP Registry.

We haven't measured its tool list yet, so its token cost is unknown.

Maintenance is active: the last public signal was 3 days ago (2026-10-16).

It runs locally on your machine over stdio.

Install TrustList MCP server

Install in Claude Code

claude mcp add eharain -- npx -y @trustlist/mcp

Security signals

97/100 — no known issues found as of 2026-10-19, from the checks below. This is not a guarantee of safety; review what a server can do before connecting it.

Deductions

  • No security policy (SECURITY.md)-3

Checks

  • ✓Repository hygiene (archived, activity, license, security policy)
  • ○Package metadata (install scripts, provenance) — pending
  • ○Tool descriptions (prompt-injection and hidden-text heuristics) — pending
  • ○Source scan (secrets, CVEs, risky code) by vectra-guard — pending

Scan it yourself before installing with vectra-guard, the open-source agent security CLI. Scoring rules

Freshness

Active — last maintenance signal 3d ago. The newest of the signals below sets the band.

  1. Last commit (default branch)

    2026-10-16 · 3d ago · GitHub

  2. Latest release

    no data · GitHub

  3. Package published

    no data · npm/PyPI

  4. Registry entry updated

    2026-10-12 · 6d ago · official registry · v0.1.1

FAQ

›How do I install the TrustList MCP server in Claude Code?

Run: claude mcp add eharain -- npx -y @trustlist/mcp. For Cursor, VS Code, Claude Desktop and Windsurf, use the install tabs above.

›Does TrustList require an API key?

No required environment variables are declared in its published metadata.

›Can I use TrustList as a remote (hosted) MCP server?

No hosted endpoint is published; it runs locally over stdio.

›Is TrustList in the official MCP registry?

Yes, as io.github.eharain/trustlist.

Sources and method

Official MCP Registry entry
updated 2026-10-12
GitHub repository
fetched 2026-10-19
Package registry (npm / PyPI)
listed
Last checked against all sources
2026-10-19

The description, packages and links come from the maintainer's own published metadata. Token cost, security signals, freshness and the reading above are MCPSkillHub's own measurements; see the methodology. Spot an error? Request a correction or claim the listing.