AgentIndex icon
AgentIndex
tooltrust-scanner logo
tooltrust-scanner
★ 19
vs
gram logo
gram
★ 274

tooltrust-scanner vs gram

tooltrust-scanner: ToolTrust Scanner is a static security scanner that analyzes MCP tool definitions before your agent trusts them. It assigns a trust grade (A–F) based on 16+ static rules, covering prompt injection, privilege escalation, and supply chain attacks. It can be used as an MCP server, CLI tool, or CI check.; gram: Gram is a cloud platform for creating, curating, and hosting MCP servers with ease. It supports OpenAPI documents and custom TypeScript functions to define tools, and provides a hosted and secure MCP server for every toolset. Gram empowers LLMs and agents to access the right data at the right time.

01

TL;DR

tooltrust-scanner logo
tooltrust-scannerSecurity & Safety · ★ 19

Scan all MCP servers in your config from an agent prompt

Read tooltrust-scanner full review →
gram logo
gramDev Tooling · ★ 274

Host one or more remote MCP servers at a custom domain

Read gram full review →
02

Side-by-Side Comparison

Field
tooltrust-scanner logotooltrust-scanner
gram logogram
Category
Security & Safety
Dev Tooling
Stars
★ 19
★ 274
License
MIT
AGPL-3.0
Install Command
curl -sfL https://raw.githubusercontent.com/AgentSafe-AI/tooltrust-scanner/main/install.sh | bash
curl -fsSL https://go.getgram.ai/cli.sh | bash
Updated
3d ago
Today
Open Source
Yes
Yes
Website
↗ Visit
↗ Visit
GitHub
↗ GitHub
↗ GitHub
Tags
agent-safety, ai-security, ai-security-tool
agents, aisdk, clis
03

Features

tooltrust-scanner logotooltrust-scanner
01Static analysis of MCP tool definitions
02Trust grade (A–F) assignment
0316+ security rules covering prompt injection, privilege escalation, supply chain CVEs, and more
04Multiple deployment modes: MCP server, CLI, and CI/GitHub Actions
05Integration with ToolTrust Directory for community-shared trust scores
gram logogram
01Minimal, lightweight, and open source
02High-level TypeScript framework that simplifies working with MCP
03Custom tool builder for creating higher-order tools by chaining lower-level tools
04OAuth support out-of-the-box
05First-class support for OpenAPI 3.0.X and 3.1.X
04

Use Cases

tooltrust-scanner logotooltrust-scanner
↳Scan all MCP servers in your config from an agent prompt
↳Block risky MCP servers in CI pipeline with fail-on thresholds
↳Gate installation of untrusted MCP servers before adding to config
gram logogram
↳Host one or more remote MCP servers at a custom domain
↳Power in-application chat by exposing context from internal or third-party APIs through tools
↳Manage and secure MCP servers for an entire organization through a unified control plane
FAQ

FAQ

What is the difference between tooltrust-scanner and gram?
Both tooltrust-scanner and gram are in the Security & Safety category. tooltrust-scanner has 19 stars, while gram has 274 stars.
Which is better, tooltrust-scanner or gram?
The best choice depends on your use case. Choose tooltrust-scanner if Scan all MCP servers in your config from an agent prompt, and gram if Host one or more remote MCP servers at a custom domain.
Is tooltrust-scanner free or open source?
Yes, tooltrust-scanner is open source on GitHub (MIT).
Is gram free or open source?
Yes, gram is open source on GitHub (AGPL-3.0).
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit
→

Related

Alternatives to tooltrust-scanner →Alternatives to gram →tooltrust-scanner details →gram details →