jestatsio/toolprint

v0.4.1Apache-2.0

package-lock.json for MCP trust. Scan MCP servers and skill bundles for tool poisoning, secret leaks, and silent rug-pulls, and pin what you trust into a committed, reviewable toolprint.lock.

GitHub Open Website

toolprint

Verify the MCP servers and skill bundles an agent is about to trust. Use when the user asks to scan, audit, pin, or check MCP servers or skills for tool poisoning, leaked secrets, or silent definition changes (rug-pulls); when adding a new MCP server to a project; or when setting up CI gating for MCP trust with a committed toolprint.lock.