AgentAvow
ChatGPT pluginIs this tool safe to connect?
AgentAvow tells you whether a tool is safe before your agent connects to it. Give it an MCP server, a package from npm, PyPI, crates or Docker, or a GitHub repo, and it answers in plain words: Safe to connect, Review before you connect, or Do not connect, with the reason. Underneath are two scores: a 0–100 trust score, backed by a signed attestation anyone can recompute offline, and an adoption score built from real usage (downloads, stars, installs). It checks for known-malicious versions, published advisories, supply-chain and dependency risk, and code-safety issues, can run the tool in a sandbox to see what it actually does, and shows an interactive trust card. Eight read-only tools cover scanning a repo, package, or live MCP server; verifying a score; checking interaction safety before you connect; looking up an identity; and getting an embeddable badge. No account, no sign-in, and nothing is modified — every call is anonymous and read-only.
- Featured
- No
not on the featured shelf
Movement
From our daily snapshots over the last 30 days.
Rank by placement
Rank in Developer tools
In its category
How this plugin compares with others in the same category. Positions are counted within the category, not across the whole directory.
Developer tools704th of 742 by placement
| # | Plugin | Position | 7d |
|---|---|---|---|
| 702 | #8274 | — | |
| 703 | #8277 | — | |
| 704 | #8289 | — | |
| 705 | #8336 | — | |
| 706 | #8349 | — |
Also on other marketplaces
Example prompts
- “Is the npm package chalk safe to install?”
- “Should I connect the MCP server at https://agentavow.com/mcp?”
- “Check the GitHub repo modelcontextprotocol/servers before I use it”
Skills
scan-before-connect
Check whether an MCP server, a published package, or a GitHub repo is safe to connect to or install. AgentAvow answers Safe to connect, Review before you connect, or Do not connect, with the reason, a signed 0-100 trust score and an adoption score. Use when the user asks whether a specific tool, package, repo, or MCP server is safe or trustworthy, or asks to vet one before installing or connecting it.
- Categories
- Made by
- Kenne Ives · Website
- Sign-in
- On Install
- Capabilities
- Interactive, Read
- Availability
- Available
- Version
- 1.1.2
- Keywords
- security, trust, mcp, supply-chain, code-scanning, attestation
- Created
- October 9, 2026
- More info
- Sponsorship
- Promote this plugin