KOVY/agentforge-trust-mcp

**One MCP connection → 100+ MCP servers, with trust audit, discovery, and execution.**
AgentForge gives any agent a single connection that exposes the entire
catalog of MCP servers — trust-scored, searchable, and executable. Trust
Scores (0–100) are computed across five dimensions: code health, security
scan, behavioral audit, community trust, and EU compliance.
v0.3.0 ships **8 tools** (4 trust + 4 action) plus a **P0 RCE sanitization
layer** (input validation, call guards, anomaly detection) with **27/27
tests passing** and **zero external runtime dependencies**.
> 📖 **Full integration guide for external multi-agent systems:**
> See agentforge.community/trust for the full integration guide
> — OpenClaw, Claude Desktop, Cursor, LangGraph, AutoGen, CrewAI in ~3 minutes.
Installation
Claude Desktop / Cursor / OpenClaw config
> Trust tools (check_trust, evaluate_policy, list_trusted, recommend)
> work without an API key. Action tools (broadcast_search, call_tool)
> require self-registration via register_agent (one tool call, no signup).
Environment
| Variable | Default | Purpose |
|---|---|---|
| AGENTFORGE_API_URL | https://agentforge.community | Override for self-hosted |
| AGENTFORGE_API_KEY | none | Enterprise tier (private catalogs, custom policies) |
Tools
Trust tools (no auth required)
check_trust
Returns the AgentForge Trust Score for a server identified by server_id,
slug, or github_url. Always call this before connecting to a new server.
evaluate_policy
Allow/deny gate. Pass a policy like {min_overall: 70, required_badges: ["actively_maintained"]}
and get back allowed: true|false with per-check detail.
list_trusted
Search the AgentForge catalog for servers matching a category and trust
threshold. Useful for "find me a secure database MCP server with overall ≥ 80".
recommend
Natural-language search with trust filter. "I need to validate Czech VAT IDs"
returns ranked results filtered by minimum trust.
Action tools (new in v0.2.0)
discover
Browse the entire catalog with full-text or semantic search. Returns ranked
results with trust scores, categories, and connection metadata. No API key
required — read-only catalog access.
broadcast_search *(API key)*
Run a single query across N servers in one call. AgentForge fans out the
search, aggregates results, and returns a unified ranked list. Pay-per-call
billing through your wallet.
call_tool *(API key)*
Invoke any tool on any server in the catalog through AgentForge's proxy.
One connection, hundreds of downstream servers — the proxy handles auth,
quotas, and trust gating.
register_agent
Self-register your agent and receive an af_agent_* API key. No human