AgentIndex icon
AgentIndex
tooltrust-scanner logo
tooltrust-scanner
★ 19
vs
mcpmate logo
mcpmate
★ 37

tooltrust-scanner vs mcpmate

tooltrust-scanner: ToolTrust Scanner is a static security scanner that analyzes MCP tool definitions before your agent trusts them. It assigns a trust grade (A–F) based on 16+ static rules, covering prompt injection, privilege escalation, and supply chain attacks. It can be used as an MCP server, CLI tool, or CI check.; mcpmate: MCPMate is a local proxy that manages MCP servers for multiple AI clients. It simplifies configuration, reduces token costs, and provides monitoring and security. It supports profile-based capability trimming, multi-client governance, and structured logging.

01

TL;DR

tooltrust-scanner logo
tooltrust-scannerSecurity & Safety · ★ 19

Scan all MCP servers in your config from an agent prompt

Read tooltrust-scanner full review →
mcpmate logo
mcpmateSecurity & Safety · ★ 37

Centralized management of MCP servers across multiple AI clients

Read mcpmate full review →
02

Side-by-Side Comparison

Field
tooltrust-scanner logotooltrust-scanner
mcpmate logomcpmate
Category
Security & Safety
Security & Safety
Stars
★ 19
★ 37
License
MIT
AGPL-3.0
Install Command
curl -sfL https://raw.githubusercontent.com/AgentSafe-AI/tooltrust-scanner/main/install.sh | bash
git clone https://github.com/loocor/MCPMate.git && cd MCPMate/backend && cargo build --release && cargo run --release
Updated
4d ago
1mo ago
Open Source
Yes
Yes
Website
↗ Visit
↗ Visit
GitHub
↗ GitHub
↗ GitHub
Tags
agent-safety, ai-security, ai-security-tool
mcp, mcp-client, mcp-server
03

Features

tooltrust-scanner logotooltrust-scanner
01Static analysis of MCP tool definitions
02Trust grade (A–F) assignment
0316+ security rules covering prompt injection, privilege escalation, supply chain CVEs, and more
04Multiple deployment modes: MCP server, CLI, and CI/GitHub Actions
05Integration with ToolTrust Directory for community-shared trust scores
mcpmate logomcpmate
01Profile-Based Capability Trimming
02Multi-Client Support (Claude Desktop, Cursor, Zed, Codex, etc.)
03Dynamic Client Governance
04Security Monitoring (tool poisoning detection, etc.)
05Structured Operational Logs
04

Use Cases

tooltrust-scanner logotooltrust-scanner
↳Scan all MCP servers in your config from an agent prompt
↳Block risky MCP servers in CI pipeline with fail-on thresholds
↳Gate installation of untrusted MCP servers before adding to config
mcpmate logomcpmate
↳Centralized management of MCP servers across multiple AI clients
↳Reducing token usage by trimming capabilities per profile
↳Monitoring and securing MCP communications
FAQ

FAQ

What is the difference between tooltrust-scanner and mcpmate?
Both tooltrust-scanner and mcpmate are in the Security & Safety category. tooltrust-scanner has 19 stars, while mcpmate has 37 stars.
Which is better, tooltrust-scanner or mcpmate?
The best choice depends on your use case. Choose tooltrust-scanner if Scan all MCP servers in your config from an agent prompt, and mcpmate if Centralized management of MCP servers across multiple AI clients.
Is tooltrust-scanner free or open source?
Yes, tooltrust-scanner is open source on GitHub (MIT).
Is mcpmate free or open source?
Yes, mcpmate is open source on GitHub (AGPL-3.0).
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit
→

Related

Alternatives to tooltrust-scanner →Alternatives to mcpmate →tooltrust-scanner details →mcpmate details →