SDK for Trusts Protocol

Pi package that automatically trusts all project folders.

A Bun-native web framework that trusts the platform. File-based routing, zero build steps, HTML that works, JavaScript that ships.

Scan a repo for hidden prompt-injection payloads before your AI agent trusts it.

Heimdall — a security scanner for Model Context Protocol (MCP) servers. Vet a server, or a whole agent config, before your agent trusts it.

Provenance-tracked tool-call guard for JS agents (CaMeL-style), fail-closed, zero dependencies. Taints tool results, trusts what the user named, and blocks untrusted data reaching network, email, exec, file or payment sinks. Text detection, spotlighting a

Sell an API for Kaspa over HTTP 402. Quotes a price, then verifies the payment is in the UTXO set before serving — it never trusts the payment header.

Audit everything your AI coding agent trusts: hooks, skills, CLAUDE.md, subagents, permissions, and MCP servers.

Local-first evidence primitive — record evidence with its acceptance criteria, re-derive integrity deterministically, and record independent third-party judgments. Never trusts a stored verdict, never lets work self-grade its own "done".

Independent, offline-capable verifier for Adjuro Ed25519 receipts (JWS / RFC 8037). Verifies signatures locally — never trusts Adjuro's server for the answer.

MCP server that checks the wash-traffic / organic-revenue risk of Algorand x402 endpoints before your agent trusts or pays them. Free quick checks; paid deep reports via x402.

Immutable DeepSeek Harness launch environment that records which layer supplied each value

This library lets a client sign PDF Documents with an ID Austria (Handysignatur) using A-Trusts PDF Signing Services.

SonarQube implementation of the coverage-base class

This project is part of the Decentralized Trust Framework. It aims to provide a decentralized trust mechanism for any address to trust code on the Blockchain (Smart Contracts) and determine which code it trusts or not.

[SECURITY TEST — DO NOT USE] Shows which GitHub Actions identity npm actually trusts at publish time — an OIDC Trusted Publishing claim inspector.

A skill that teaches an LLM how to set up and/or use npm trusted publishing (OIDC) with GitHub Actions. No long-lived tokens, no 2FA prompts, no manual rotation.

Replace port numbers with stable, named .localhost URLs. For humans and agents.

Presaid API client for agents: HMAC-signed requests, commit stamping, and local proof verification — your agent never trusts the server about its own record.

The Queldrex Trust Layer as an MCP server: scan other MCP tools and servers for poisoning and prompt injection before your agent trusts them, and verify Queldrex Trust Receipts offline.