AgentAvow

AgentAvow tells you whether a tool is safe before your agent connects to it. Give it an MCP server, a package from npm, PyPI, crates or Docker, or a GitHub repo, and it answers in plain words: Safe to connect, Review before you connect, or Do not connect, with the reason. Underneath are two scores: a 0–100 trust score, backed by a signed attestation anyone can recompute offline, and an adoption score built from real usage (downloads, stars, installs). It checks for known-malicious versions, published advisories, supply-chain and dependency risk, and code-safety issues, can run the tool in a sandbox to see what it actually does, and shows an interactive trust card. Eight read-only tools cover scanning a repo, package, or live MCP server; verifying a score; checking interaction safety before you connect; looking up an identity; and getting an embeddable badge. No account, no sign-in, and nothing is modified — every call is anonymous and read-only.