TrustScan
Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.
likely compatible
Answered an MCP initialize with no credentials; use auth 'None'.
Rule R2a · what this means · Not tested in Copilot Studio.
| Registry name | io.github.entradox/trust-scan |
| Endpoint used for verdict | https://trust-scan-production.up.railway.app/mcp/ |
| Transports | streamable-http |
| Auth (Copilot Studio setting) | None (open) |
| Last endpoint check | 2026-10-20T18:14:36Z · initialize OK |
| GitHub | entradox/trust-scan |
| Website | https://github.com/entradox/trust-scan |
| Version | 0.1.0 |
| Registry updated | 2026-09-07 |
Track changes like this weekly. New Copilot-ready MCP servers, breakages and auth changes, in one short email.
Is this wrong or out of date? Email us. Data built 2026-10-20.