
CraftedTrust
not read yet
Use
- For
- developers and teams checking public MCP servers before connecting an agent to real data
- Runs as
- API
- Used for
- search public MCP servers by URL, package or publisher
- run a public scan on an MCP server before connecting
- review tool risk and auth signals in a server's checklist
- Has an MCP server (1 in the registry)public registry →
Price not read
- Trust centertheir owntrust center ↗
- Security contactsecurity.txt
These are CraftedTrust's own statements, read from its pages. We did not audit them. A line that is missing was not found on the pages we read; it does not mean the practice is absent.
- MCP servercom.craftedtrust/mcp-shieldverified in the MCP registry
- Stateanswers, 4 toolschecked 2026-10-24
- Address to connectmcp.craftedtrust.com/api/v1/mcp
- API docscraftedtrust.com/api-docsthe vendor's page ↗
- MCP docscraftedtrust.com/trust-centerthe vendor's page ↗
- Status pagelinked from the homepagecraftedtrust.com/status ↗
This card as JSON, for your agent →
Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.
Figure and bar: visits/mo, estimate · year: online since
- #1

GitLabMCP · sign-in
Hosts source repositories, CI/CD pipelines and security scanning, with AI agents running under the same merge request approvals and audit trail.
591kActive2011 - #2

TestMu AI (Formerly LambdaTest)
Runs manual and automated Selenium, Playwright, Cypress and Appium tests on cloud browsers and real mobile devices, with test agents for generating tests.
370kActiveFrom $15/mo2017 - #3

Cursor
AI coding agent that writes code, runs tasks, and reviews pull requests autonomously or with human direction.
314kActiveFrom $8/mo2023 - #4

Snyk
Scans source code, open source dependencies, container images and infrastructure-as-code for vulnerabilities, and suggests fixes in the IDE, CLI and pull requests.
63.1kActiveFrom $25/mo2015 - #5

Imbue
Builds coding-agent tools such as Sculptor, which runs several coding agents in parallel in isolated workspaces under the developer's control.
35.2kActive - #6

TwitterapiMCP · open
Returns public X posts, profiles, follower graphs and trends over a REST API, billed per result returned.
11.7kActiveFrom $0.00 per use2024
Not it? Say what you need
betaThree tools from the Atlas for the job you describe, each with what fits and what does not.
No notes yet. What do you use CraftedTrust for?
Sign in to leave a noteWhat is CraftedTrust?
Indexes public MCP servers and runs safety scans on them, scoring each one before an agent connects. It is listed in the Atlas under Developer tools.
Who is CraftedTrust for?
developers and teams checking public MCP servers before connecting an agent to real data
Is CraftedTrust free?
No. Its pricing page showed no free plan on 2026-10-24.
Do people use CraftedTrust?
Little sign of use.
Is CraftedTrust safe?
We do not audit vendors. What CraftedTrust publishes, read 2026-10-24: a trust center.
What are alternatives to CraftedTrust?
In Developer tools, by use: GitLab, TestMu AI (Formerly LambdaTest), Cursor, Snyk, Imbue, Twitterapi.
How we read a tool
No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.
- Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
- Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
- Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
- The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.
How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.
How we read every tool → · By INITE Atlas Desk
Cookies
Before we count this visit
Analytics and ad measurement tell us which pages and which of our ads do their job: Google Analytics and Google Ads, the Meta pixel, Yandex Metrica, and one first-party id of our own. Nothing is stored until you answer, and declining changes nothing about the site.