AgentIndex icon
AgentIndex
tooltrust-scanner logo
tooltrust-scanner
★ 19
vs
toolhive-registry-server logo
toolhive-registry-server
★ 29

tooltrust-scanner vs toolhive-registry-server

tooltrust-scanner: ToolTrust Scanner is a static security scanner that analyzes MCP tool definitions before your agent trusts them. It assigns a trust grade (A–F) based on 16+ static rules, covering prompt injection, privilege escalation, and supply chain attacks. It can be used as an MCP server, CLI tool, or CI check.; toolhive-registry-server: The ToolHive Registry Server implements the official MCP Registry API specification, serving as the centralized metadata engine for the ToolHive platform. It enables enterprises to curate, discover, and govern MCP servers with security and auditability built-in, aggregating multiple sources into a unified catalog.

01

TL;DR

tooltrust-scanner logo
tooltrust-scannerSecurity & Safety · ★ 19

Scan all MCP servers in your config from an agent prompt

Read tooltrust-scanner full review →
toolhive-registry-server logo
toolhive-registry-serverSecurity & Safety · ★ 29

Enterprise UI browsing and searching a unified catalog of MCP servers

Read toolhive-registry-server full review →
02

Side-by-Side Comparison

Field
tooltrust-scanner logotooltrust-scanner
toolhive-registry-server logotoolhive-registry-server
Category
Security & Safety
Security & Safety
Stars
★ 19
★ 29
License
MIT
Apache-2.0
Install Command
curl -sfL https://raw.githubusercontent.com/AgentSafe-AI/tooltrust-scanner/main/install.sh | bash
go build -o thv-registry-api ./cmd/thv-registry-api && ./thv-registry-api serve --config config.yaml
Updated
4d ago
1d ago
Open Source
Yes
Yes
Website
↗ Visit
↗ Visit
GitHub
↗ GitHub
↗ GitHub
Tags
agent-safety, ai-security, ai-security-tool
ai, ai-governance, ai-security
03

Features

tooltrust-scanner logotooltrust-scanner
01Static analysis of MCP tool definitions
02Trust grade (A–F) assignment
0316+ security rules covering prompt injection, privilege escalation, supply chain CVEs, and more
04Multiple deployment modes: MCP server, CLI, and CI/GitHub Actions
05Integration with ToolTrust Directory for community-shared trust scores
toolhive-registry-server logotoolhive-registry-server
01Enterprise governance with OAuth 2.0/OIDC authentication and audit trail
02Flexible registry sources: curated, upstream API, Git, local files, Kubernetes discovery
03Automatic background synchronization with configurable intervals and retry logic
04PostgreSQL backend with automatic migrations
05Standards-compliant MCP Registry API with per-registry and aggregated endpoints
04

Use Cases

tooltrust-scanner logotooltrust-scanner
↳Scan all MCP servers in your config from an agent prompt
↳Block risky MCP servers in CI pipeline with fail-on thresholds
↳Gate installation of untrusted MCP servers before adding to config
toolhive-registry-server logotoolhive-registry-server
↳Enterprise UI browsing and searching a unified catalog of MCP servers
↳Secure discovery and consumption of MCPs within organizational boundaries
↳Automated synchronization and governance of MCP metadata across multiple sources
FAQ

FAQ

What is the difference between tooltrust-scanner and toolhive-registry-server?
Both tooltrust-scanner and toolhive-registry-server are in the Security & Safety category. tooltrust-scanner has 19 stars, while toolhive-registry-server has 29 stars.
Which is better, tooltrust-scanner or toolhive-registry-server?
The best choice depends on your use case. Choose tooltrust-scanner if Scan all MCP servers in your config from an agent prompt, and toolhive-registry-server if Enterprise UI browsing and searching a unified catalog of MCP servers.
Is tooltrust-scanner free or open source?
Yes, tooltrust-scanner is open source on GitHub (MIT).
Is toolhive-registry-server free or open source?
Yes, toolhive-registry-server is open source on GitHub (Apache-2.0).
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit
→

Related

Alternatives to tooltrust-scanner →Alternatives to toolhive-registry-server →tooltrust-scanner details →toolhive-registry-server details →