AgentIndex icon
AgentIndex
tooltrust-scanner logo
tooltrust-scanner
★ 19
vs
ggmcp logo
ggmcp
★ 40

tooltrust-scanner vs ggmcp

tooltrust-scanner: ToolTrust Scanner is a static security scanner that analyzes MCP tool definitions before your agent trusts them. It assigns a trust grade (A–F) based on 16+ static rules, covering prompt injection, privilege escalation, and supply chain attacks. It can be used as an MCP server, CLI tool, or CI check.; ggmcp: The GitGuardian MCP server enables AI agents to scan for leaked secrets, manage security incidents, and create honeytokens using the GitGuardian API. It supports OAuth and PAT authentication, and integrates with various IDEs like Cursor, Claude Desktop, Windsurf, and Zed.

01

TL;DR

tooltrust-scanner logo
tooltrust-scannerSecurity & Safety · ★ 19

Scan all MCP servers in your config from an agent prompt

Read tooltrust-scanner full review →
ggmcp logo
ggmcpSecurity & Safety · ★ 40

Scan codebase for leaked secrets or credentials

Read ggmcp full review →
02

Side-by-Side Comparison

Field
tooltrust-scanner logotooltrust-scanner
ggmcp logoggmcp
Category
Security & Safety
Security & Safety
Stars
★ 19
★ 40
License
MIT
MIT
Install Command
curl -sfL https://raw.githubusercontent.com/AgentSafe-AI/tooltrust-scanner/main/install.sh | bash
uvx --from git+https://github.com/GitGuardian/ggmcp.git developer-mcp-server
Updated
4d ago
1d ago
Open Source
Yes
Yes
Website
↗ Visit
↗ Visit
GitHub
↗ GitHub
↗ GitHub
Tags
agent-safety, ai-security, ai-security-tool
mcp, mcp-server, mcp-servers
03

Features

tooltrust-scanner logotooltrust-scanner
01Static analysis of MCP tool definitions
02Trust grade (A–F) assignment
0316+ security rules covering prompt injection, privilege escalation, supply chain CVEs, and more
04Multiple deployment modes: MCP server, CLI, and CI/GitHub Actions
05Integration with ToolTrust Directory for community-shared trust scores
ggmcp logoggmcp
01Secret Scanning
02Incident Management
03Honeytokens
04Authentication Management
05Token Management
04

Use Cases

tooltrust-scanner logotooltrust-scanner
↳Scan all MCP servers in your config from an agent prompt
↳Block risky MCP servers in CI pipeline with fail-on thresholds
↳Gate installation of untrusted MCP servers before adding to config
ggmcp logoggmcp
↳Scan codebase for leaked secrets or credentials
↳Remediate all incidents related to a project
↳Help understand a security incident and provide remediation steps
FAQ

FAQ

What is the difference between tooltrust-scanner and ggmcp?
Both tooltrust-scanner and ggmcp are in the Security & Safety category. tooltrust-scanner has 19 stars, while ggmcp has 40 stars.
Which is better, tooltrust-scanner or ggmcp?
The best choice depends on your use case. Choose tooltrust-scanner if Scan all MCP servers in your config from an agent prompt, and ggmcp if Scan codebase for leaked secrets or credentials.
Is tooltrust-scanner free or open source?
Yes, tooltrust-scanner is open source on GitHub (MIT).
Is ggmcp free or open source?
Yes, ggmcp is open source on GitHub (MIT).
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit
→

Related

Alternatives to tooltrust-scanner →Alternatives to ggmcp →tooltrust-scanner details →ggmcp details →