trust-tools

connects

obeliskgate.com

Website security ratings, token verification, and tamper-evident ledger heads from Obelisk Gate.

https://obeliskgate.com/mcpWebsiteOAuthMCP 2025-06-18v1last checked 24 Aug 2026spoke MCP on 3 of 3 checks (30 days)initialize in 372 ms

How to authenticate

Checked against the endpoint by our probe on 24 Aug 2026. These are the capabilities the server advertises, not a prediction about any particular client.

Scheme	OAuth
Issuer	https://obeliskgate.com
Dynamic client registration	✕Not advertised
Client ID Metadata Document	✓Supported A client identifies itself by a URL to its own metadata, so no registration step is required.
PKCE	✓S256
Grant types	authorization_code, refresh_token
Scopes	openid, profile, email, offline_access
Protected-resource metadata	✓Published (RFC 9728)
Anonymous access	Handshake succeeds; 8 tools listable
Documentation	https://obeliskgate.com/developers

What the probe found

No CORS headers for browser-based clients

A cross-origin preflight came back without Access-Control-Allow-Origin, so the endpoint is reachable from native clients only — code running in a web page is stopped by the browser before a request is ever sent.

8 tools usable without signing in

The server exposes a public surface before authorization: scan_trust, verify_token, get_org_rating, verify_agent_run_proof, get_agent_proof, transparency_head, gate_status, explain_rating.

Tools

explain_ratinggate_statusget_agent_proofget_org_ratingscan_trusttransparency_headverify_agent_run_proofverify_token

Contract history

24 Aug 2026v1first recorded contract

Get alerted when this contract changes

Depend on this server? Leave an email and get a message when a probe records a change — a tool removed, an argument newly required, an enum narrowed. Alerts are being built; signing up is what tells us to hurry.

Prefer a feed reader? This page's contract changes are also an Atom feed.

Status badge

Status for a README, from the last probe — cached an hour, so up to seven hours behind the endpoint. Links back to this page.

[![MCP status](https://mcpi.app/servers/trust-tools/badge.svg)](https://mcpi.app/servers/trust-tools)