AgentIndex icon
AgentIndex
tooltrust-scanner logo
tooltrust-scanner
★ 19
vs
nyxstrike logo
nyxstrike
★ 156

tooltrust-scanner vs nyxstrike

tooltrust-scanner: ToolTrust Scanner is a static security scanner that analyzes MCP tool definitions before your agent trusts them. It assigns a trust grade (A–F) based on 16+ static rules, covering prompt injection, privilege escalation, and supply chain attacks. It can be used as an MCP server, CLI tool, or CI check.; nyxstrike: NyxStrike connects LLM agents to real offensive security tools, orchestrating full attack chains from recon to exploitation. It features 185+ tools, MCP compatibility, and a real-time dashboard. It is designed for authorized penetration testing, bug bounties, and CTF challenges.

01

TL;DR

tooltrust-scanner logo
tooltrust-scannerSecurity & Safety · ★ 19

Scan all MCP servers in your config from an agent prompt

Read tooltrust-scanner full review →
nyxstrike logo
nyxstrikeSecurity & Safety · ★ 156

Authorized penetration testing

Read nyxstrike full review →
02

Side-by-Side Comparison

Field
tooltrust-scanner logotooltrust-scanner
nyxstrike logonyxstrike
Category
Security & Safety
Security & Safety
Stars
★ 19
★ 156
License
MIT
NOASSERTION
Install Command
curl -sfL https://raw.githubusercontent.com/AgentSafe-AI/tooltrust-scanner/main/install.sh | bash
git clone https://github.com/CommonHuman-Lab/nyxstrike.git && cd nyxstrike && ./nyxstrike.sh -a
Updated
4d ago
5d ago
Open Source
Yes
Yes
Website
↗ Visit
↗ Visit
GitHub
↗ GitHub
↗ GitHub
Tags
agent-safety, ai-security, ai-security-tool
ai, hexstrike, kali-linux
03

Features

tooltrust-scanner logotooltrust-scanner
01Static analysis of MCP tool definitions
02Trust grade (A–F) assignment
0316+ security rules covering prompt injection, privilege escalation, supply chain CVEs, and more
04Multiple deployment modes: MCP server, CLI, and CI/GitHub Actions
05Integration with ToolTrust Directory for community-shared trust scores
nyxstrike logonyxstrike
01AI agents that chain tools automatically
02185+ offensive security tools
03Full attack workflow: recon to reporting
04Modular tool registry
05MCP-compatible with any AI client
04

Use Cases

tooltrust-scanner logotooltrust-scanner
↳Scan all MCP servers in your config from an agent prompt
↳Block risky MCP servers in CI pipeline with fail-on thresholds
↳Gate installation of untrusted MCP servers before adding to config
nyxstrike logonyxstrike
↳Authorized penetration testing
↳Bug bounty programs
↳CTF competitions and educational environments
FAQ

FAQ

What is the difference between tooltrust-scanner and nyxstrike?
Both tooltrust-scanner and nyxstrike are in the Security & Safety category. tooltrust-scanner has 19 stars, while nyxstrike has 156 stars.
Which is better, tooltrust-scanner or nyxstrike?
The best choice depends on your use case. Choose tooltrust-scanner if Scan all MCP servers in your config from an agent prompt, and nyxstrike if Authorized penetration testing.
Is tooltrust-scanner free or open source?
Yes, tooltrust-scanner is open source on GitHub (MIT).
Is nyxstrike free or open source?
Yes, nyxstrike is open source on GitHub (NOASSERTION).
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit
→

Related

Alternatives to tooltrust-scanner →Alternatives to nyxstrike →tooltrust-scanner details →nyxstrike details →