Every AI tool scanned, scored, and certified. Know what your AI tools are doing before you connect.
63 automated checks across 9 domains including A2A Agent Card security, tool poisoning, input validation, data security, supply chain, infrastructure, and runtime. Findings scored with OWASP AIVSS.
CycloneDX SBOM generation, dependency vulnerability scanning via OSV, Sigstore provenance verification, and container hardening analysis for every indexed package.
Every finding mapped to CoSAI, OWASP MCP Top 10, OWASP Agentic AI Top 10, MITRE ATLAS, NIST AI RMF, EU AI Act, ISO 42001, MAESTRO, SOC 2 Type II, and HITRUST CSF. Published advisories include full compliance context.
219 automated adversarial attack templates across 14 categories. Prompt injection, tool poisoning, privilege escalation, jailbreak, encoding bypass, and more. Available via API and CLI.
The platform has grown quickly. These are the shortest paths for most people using CraftedTrust today.
Search the Registry, review Touchstone research, and understand whether a server is indexed, live verified, certified, or actively monitored.
Use scans, assisted review, certification, badges, and proof exports to make trust visible to users, buyers, and marketplaces.
Move from trust checks to runtime policy, agent identity, traces, approvals, and governance when you need operational control.
Use the Trust Center, procurement materials, signed proof bundles, and partner integration hooks when a public score is not enough.
The recent roadmap work centered on four upgrades: runtime protection, agent identity, public trust/procurement, and portable proof for partner workflows.
Audit is now the Runtime Gateway story: in-path policy, receipts, approvals, quickstarts, and compliance-oriented evidence.
Identity now issues agent-native delegated sessions, while Trace and Governance expose the execution and oversight context around them.
The public trust layer now includes security, disclosure, incident response, procurement, HIPAA/FedRAMP posture, and researcher-program materials.
Signed proof bundles, trust manifests, partner integrations, and public asset summaries now connect trust data to real buyer and partner workflows.
Stand out in MCP marketplaces with a verified trust badge. Prove to users your server is safe, transparent, and trustworthy.