tooltrust-scanner
★ 16
vs
semble
★ 4.6k
tooltrust-scanner vs semble
tooltrust-scanner: ToolTrust Scanner is a static security scanner that analyzes MCP tool definitions before your agent trusts them. It assigns a trust grade (A–F) based on 16+ static rules, covering prompt injection, privilege escalation, and supply chain attacks. It can be used as an MCP server, CLI tool, or CI check.; semble: Semble is a high-performance code search library designed for AI agents, providing instant access to precise code snippets. It offers significantly faster indexing and querying compared to transformer models, achieving 99% of their retrieval quality while running entirely on CPU without external dependencies.
01
TL;DR
Choose tooltrust-scanner if…Scan all MCP servers in your config from an agent prompt
Choose semble if…Enhancing AI agents (e.g., Claude Code, Cursor, Codex) with fast and accurate code search capabilities
02
Side-by-Side Comparison
03
Features
tooltrust-scanner01Static analysis of MCP tool definitions
02Trust grade (A–F) assignment
0316+ security rules covering prompt injection, privilege escalation, supply chain CVEs, and more
04Multiple deployment modes: MCP server, CLI, and CI/GitHub Actions
05Integration with ToolTrust Directory for community-shared trust scores
semble01Fast performance on CPU (indexes in ~250ms, queries in ~1.5ms)
02High accuracy (NDCG@10 of 0.854), comparable to transformer models
03Supports indexing local paths and remote Git repositories
04Functions as an MCP server for various AI agents
05Zero setup, no API keys, GPU, or external services required
04
Use Cases
tooltrust-scanner↳Scan all MCP servers in your config from an agent prompt
↳Block risky MCP servers in CI pipeline with fail-on thresholds
↳Gate installation of untrusted MCP servers before adding to config
semble↳Enhancing AI agents (e.g., Claude Code, Cursor, Codex) with fast and accurate code search capabilities
↳Searching local or remote codebases for specific code snippets based on natural language or code queries
↳Finding semantically similar code sections related to a given file path and line number
05
Best For
tooltrust-scannerTrendingSecurity & SafetyAPI Integration
sembleCode AssistantRAG / Knowledge Base
FAQ
FAQ
What is the difference between tooltrust-scanner and semble?
Both tooltrust-scanner and semble are in the Security & Safety category. tooltrust-scanner has 16 stars, while semble has 4.6k stars.
Which is better, tooltrust-scanner or semble?
The best choice depends on your use case. Choose tooltrust-scanner if Scan all MCP servers in your config from an agent prompt, and semble if Enhancing AI agents (e.g., Claude Code, Cursor, Codex) with fast and accurate code search capabilities.
Is tooltrust-scanner free or open source?
Yes, tooltrust-scanner is open source on GitHub (MIT).
Is semble free or open source?
Yes, semble is open source on GitHub (MIT).
→