tooltrust-scanner logo
tooltrust-scanner
★ 19
vs
yorishiro-proxy logo
yorishiro-proxy
★ 19

tooltrust-scanner vs yorishiro-proxy

tooltrust-scanner: ToolTrust Scanner is a static security scanner that analyzes MCP tool definitions before your agent trusts them. It assigns a trust grade (A–F) based on 16+ static rules, covering prompt injection, privilege escalation, and supply chain attacks. It can be used as an MCP server, CLI tool, or CI check.; yorishiro-proxy: Yorishiro Proxy is an AI-first MITM proxy tool that runs as an MCP server, giving AI agents full control over proxy operations. It supports multiple protocols including HTTP, HTTPS, gRPC, WebSocket, and raw TCP, with features like traffic recording, replay, fuzzing, and a web UI. Designed for automated security testing with Claude Code and other MCP-compatible agents.

01

TL;DR

tooltrust-scanner logo
tooltrust-scannerSecurity & Safety · ★ 19

Scan all MCP servers in your config from an agent prompt

yorishiro-proxy logo
yorishiro-proxySecurity & Safety · ★ 19

Automated security testing with AI agents

02

Side-by-Side Comparison

Field
tooltrust-scanner logotooltrust-scanner
yorishiro-proxy logoyorishiro-proxy
Category
Security & Safety
Security & Safety
Stars
★ 19
★ 19
License
MIT
Apache-2.0
Install Command
curl -sfL https://raw.githubusercontent.com/AgentSafe-AI/tooltrust-scanner/main/install.sh | bash
git clone https://github.com/usk6666/yorishiro-proxy.git && cd yorishiro-proxy && make build
Updated
4d ago
2d ago
Open Source
Yes
Yes
Tags
agent-safety, ai-security, ai-security-tool
mcp-server, mcp-servers, mitm-proxy
03

Features

tooltrust-scanner logotooltrust-scanner
01Static analysis of MCP tool definitions
02Trust grade (A–F) assignment
0316+ security rules covering prompt injection, privilege escalation, supply chain CVEs, and more
04Multiple deployment modes: MCP server, CLI, and CI/GitHub Actions
05Integration with ToolTrust Directory for community-shared trust scores
yorishiro-proxy logoyorishiro-proxy
01Traffic Interception & Recording
02Per-Protocol Resend with typed schemas
03Per-Protocol Fuzz with payload sets
04Multi-Protocol support (HTTP, HTTPS, gRPC, WebSocket, etc.)
05Embedded Web UI for visual inspection
04

Use Cases

tooltrust-scanner logotooltrust-scanner
↳Scan all MCP servers in your config from an agent prompt
↳Block risky MCP servers in CI pipeline with fail-on thresholds
↳Gate installation of untrusted MCP servers before adding to config
yorishiro-proxy logoyorishiro-proxy
↳Automated security testing with AI agents
↳Traffic analysis and replay for debugging
↳Fuzzing APIs and web applications
FAQ

FAQ

What is the difference between tooltrust-scanner and yorishiro-proxy?
Both tooltrust-scanner and yorishiro-proxy are in the Security & Safety category. tooltrust-scanner has 19 stars, while yorishiro-proxy has 19 stars.
Which is better, tooltrust-scanner or yorishiro-proxy?
The best choice depends on your use case. Choose tooltrust-scanner if Scan all MCP servers in your config from an agent prompt, and yorishiro-proxy if Automated security testing with AI agents.
Is tooltrust-scanner free or open source?
Yes, tooltrust-scanner is open source on GitHub (MIT).
Is yorishiro-proxy free or open source?
Yes, yorishiro-proxy is open source on GitHub (Apache-2.0).
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit
→

Related