tooltrust-scanner logo
tooltrust-scanner
★ 19
vs
node9-proxy logo
node9-proxy
★ 219

tooltrust-scanner vs node9-proxy

tooltrust-scanner: ToolTrust Scanner is a static security scanner that analyzes MCP tool definitions before your agent trusts them. It assigns a trust grade (A–F) based on 16+ static rules, covering prompt injection, privilege escalation, and supply chain attacks. It can be used as an MCP server, CLI tool, or CI check.; node9-proxy: Node9 is an execution security layer for AI agents that intercepts dangerous shell commands and tool calls in real-time. It features a multi-channel approval system (native popup, browser, Slack, terminal), a flight recorder for live monitoring, and an AI negotiation loop to guide safer behavior. It also includes DLP content scanning and shadow git snapshots for undo.

01

TL;DR

tooltrust-scanner logo
tooltrust-scannerSecurity & Safety · ★ 19

Scan all MCP servers in your config from an agent prompt

node9-proxy logo
node9-proxySecurity & Safety · ★ 219

Protect AI agents from executing dangerous commands during development

02

Side-by-Side Comparison

Field
tooltrust-scanner logotooltrust-scanner
node9-proxy logonode9-proxy
Category
Security & Safety
Security & Safety
Stars
★ 19
★ 219
License
MIT
NOASSERTION
Install Command
curl -sfL https://raw.githubusercontent.com/AgentSafe-AI/tooltrust-scanner/main/install.sh | bash
npm install -g @node9/proxy
Updated
4d ago
3d ago
Open Source
Yes
Yes
Tags
agent-safety, ai-security, ai-security-tool
ai-safety, ai-security, claude-code
03

Features

tooltrust-scanner logotooltrust-scanner
01Static analysis of MCP tool definitions
02Trust grade (A–F) assignment
0316+ security rules covering prompt injection, privilege escalation, supply chain CVEs, and more
04Multiple deployment modes: MCP server, CLI, and CI/GitHub Actions
05Integration with ToolTrust Directory for community-shared trust scores
node9-proxy logonode9-proxy
01Multi-Channel Race Engine (simultaneous approvals across native/browser/cloud/terminal)
02Flight Recorder (real-time activity stream in browser dashboard and terminal)
03AI Negotiation Loop (instructs AI to pivot to safer alternatives)
04Shadow Git Snapshots (one-click undo for AI file edits)
05DLP Content Scanner (detects and blocks secrets in tool call arguments)
04

Use Cases

tooltrust-scanner logotooltrust-scanner
↳Scan all MCP servers in your config from an agent prompt
↳Block risky MCP servers in CI pipeline with fail-on thresholds
↳Gate installation of untrusted MCP servers before adding to config
node9-proxy logonode9-proxy
↳Protect AI agents from executing dangerous commands during development
↳Enable safe code editing with instant undo via git snapshots
↳Govern cloud infrastructure actions using opt-in shields for services like AWS, GitHub, and Postgres
FAQ

FAQ

What is the difference between tooltrust-scanner and node9-proxy?
Both tooltrust-scanner and node9-proxy are in the Security & Safety category. tooltrust-scanner has 19 stars, while node9-proxy has 219 stars.
Which is better, tooltrust-scanner or node9-proxy?
The best choice depends on your use case. Choose tooltrust-scanner if Scan all MCP servers in your config from an agent prompt, and node9-proxy if Protect AI agents from executing dangerous commands during development.
Is tooltrust-scanner free or open source?
Yes, tooltrust-scanner is open source on GitHub (MIT).
Is node9-proxy free or open source?
Yes, node9-proxy is open source on GitHub (NOASSERTION).
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit
→

Related