Is It Trust Ready — agent-trust-readiness scanner
Official8 toolsby mnemom
Scan any website or MCP server for agent-trust-readiness; returns a signed, verifiable scorecard.
Scans websites and MCP servers for agent-trust readiness with verifiable scorecards.
Captured live from the server via tools/list.
get_agent
Look up an agent's public identity and trust state by ID — the accountable record other agents and humans can rely on.
Parameters (1)
- agent_idstringrequired
Agent identifier (e.g. smolt-abc123)
get_reputation
Look up an AI agent's published Trust Rating — Mnemom's portable reliability signal for autonomous software, computed from the agent's own verified activity record. Returns the rating plus the technical factors behind it. Free, public, read-only: every registered agent's rating is published by standard (the `visibility` field is the reputation-publication axis, distinct from identity-record visibility).
Parameters (1)
- agent_idstringrequired
Agent identifier (e.g. smolt-abc123)
get_reputation_badge
Get an embeddable Trust Rating badge for an agent — returns the badge image URL plus ready-to-paste Markdown and HTML snippets for a README or agent card.
Parameters (1)
- agent_idstringrequired
Agent identifier (e.g. smolt-abc123)
get_started
Zero-auth, no-args orientation: who Mnemom is, the surface map, how to authenticate and what it unlocks, and the value tools to try right now (headlining scan_trust + the reputation reads).
Parameters (1)
- tokenstring
Optional Dojo try-me invite token. When supplied and valid, returns the token-gated dojo briefing manifest (the same content as GET /v1/dojo/try-me/resolve); omit for public orientation.
scan_trust
Scan a website's agent-trust-readiness and return a signed scorecard (Trust, plus an Access axis on newer rubrics). Zero-auth. Results are CACHED for up to 24h — check `cached` and `scannedAt` on the result; pass `fresh: true` to force a re-scan (rate-limited). Proxies to the SSRF-locked isittrustready scanner; the Ed25519 signature + permalink are preserved verbatim. Rubric + docs: https://www.isittrustready.ai/rubric and https://docs.mnemom.ai/.
Parameters (2)
- urlstringrequired
Domain or URL to scan, e.g. "example.com" or "https://example.com".
- freshboolean
Force a fresh re-scan instead of the cached result (results are cached up to 24h; the engine rate-limits re-scans). Equivalent to the scanner's rescan flag.
search_reputation_directory
Resolve an agent name or id-prefix to a real agent_id over the PUBLIC reputation directory (only agents whose reputation visibility is public). Zero-auth. The arriving-agent entry point: discover a concrete agent_id, then call get_reputation / verify_reputation on it.
Parameters (6)
- qstring
Name search (ilike) or agent-id prefix match.
- gradestring
Filter to one grade (e.g. `AAA`, `B`, `NR`).
- confidencestring
Filter to agents at a given reputation-confidence level (driven by how much evidence backs the score).
- sortstring
Result ordering. Default "score" (highest-rated first); other supported keys order by recency or name.
- pageinteger
1-based page number for pagination. Default 1.
- per_pageinteger
Number of results per page. 1–100, default 20.
verify_reputation
Attest an agent's Trust Rating — returns a Merkle-root + hash-chain attestation (hash_chain_valid) proving the rating derives from an unbroken, append-only checkpoint chain, plus a pointer to the signed integrity certificate. This is a chain-integrity attestation, NOT an in-band Ed25519 signature check (that parity is verify_scan, for website scorecards).
Parameters (1)
- agent_idstringrequired
Agent identifier (e.g. smolt-abc123)
verify_scan
Verify a website scan scorecard's Ed25519 signature IN-BAND (verify, don't trust). Pass a `scan` (a scorecard from scan_trust) or a `url` to re-scan; returns {verified, key_id, canonicalization} checked against the public key at mnemom://iitr/jwks. Zero-auth. Spec + rubric: https://www.isittrustready.ai/rubric and https://docs.mnemom.ai/.
Parameters (2)
- scanobject
A scan scorecard previously returned by scan_trust (or iitr's /r/ JSON), passed back verbatim to verify. Same shape as scan_trust's result; the signature is checked against mnemom://iitr/jwks.
- urlstring
Alternatively, a domain/URL to re-scan and then verify.
README not available yet.
Install
Remote endpoint
Streamable HTTPHosted server - connect over the network, no local install.
https://api.isittrustready.ai/mcpclaude_desktop_config.json
{
"mcpServers": {
"isittrustready": {
"command": "npx",
"args": [
"-y",
"mcp-remote",
"https://api.isittrustready.ai/mcp"
]
}
}
}Desktop config is stdio-only; this bridges via mcp-remote. Native remote: Settings > Connectors.