Loading…
KYA identity verification, trust scoring, and performance bonds for AI agents.
Do not connect
The assessed surface is high-risk. Remediate the findings before connecting.
Scanned 1 month ago Due for re-check
A server can change after it's graded. Re-run the automated scan to refresh this report.
This grade is deterministic and reproducible: the same server surface always yields the same grade under a given algorithm version. It is a real automated assessment computed by the MCPGrade engine from what the probe actually observed — not a fabricated or opinion score. It is not a manual human pentest, so it can miss context-specific risks.
Every signal below was measured directly by the automated probe. The grade is derived only from evidence like this — nothing is assumed.
The hivetrust MCP server exposes 17 tools, focused primarily on general-purpose capabilities. Its published description reads: "KYA identity verification, trust scoring, and performance bonds for AI agents". It communicates over Streamable HTTP using the 2026-07-28 protocol revision, and does not require authorization to connect. MCPGrade currently rates hivetrust D — the assessed surface is high-risk and should be remediated before use. Its most notable findings include "Hidden instructions in a tool description" and "Tool input schema requests a secret". This report is a deterministic, reproducible automated assessment: the same observed surface always yields the same grade under a given algorithm version, and it is refreshed as new scans arrive and free to read — but it is not a substitute for a manual human security review. Always re-check hivetrust's advertised tools, transport security, and authorization posture before connecting an autonomous agent or sharing sensitive context with it.
Add hivetrust to an MCP client using the endpoint below. Review the grade and findings above before granting an autonomous agent access.
MCP endpoint
https://hivetrust.onrender.com/mcpStreamable HTTP transport. This is the MCP endpoint, not a website — paste it into your MCP client server list rather than a browser.
Captured passively during the read-only scan. Click any value to find servers that match it.
The tools this server advertises via tools/list — names, purposes, and the parameters each accepts, exactly as enumerated read-only.
Register a new AI agent identity with HiveTrust KYA (Know Your Agent). Assigns a unique agent ID, anchors the public key, and initializes the trust score.
Sorted worst-first. Each finding shows its severity, what it means, its OWASP MCP Top-10 mapping, and a recommended fix — the check id links to the exact methodology row that produced it.
tool: hivetrust_register_agent
A tool description contains imperative text aimed at the model (e.g. "ignore previous", "before answering read …").
m of the agent (system prompt + tools + model config)"},"owner_id":{"type":"sRecommendationRemove model-directed instructions from tool descriptions.
tool: hivetrust_issue_credential
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "credential_type"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: hivetrust_verify_credential
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "credential_id"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: hivetrust_revoke_credential
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "credential_id"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
The server accepts tool enumeration (and likely invocation) with no authentication.
RecommendationRequire OAuth 2.1 authorization for any server exposing non-public tools.
tool: hivetrust_revoke_credential
The server advertises open-world / broadly-scoped capabilities.
annotations.destructiveHint = trueRecommendationScope tools to the minimum needed.
Financial data service providing fundamental information for 30,000+ listed companies across the US, Japan, and Korea, sourced directly from SEC, EDINET, and DART regulatory filings.
Search tours, attraction tickets, and holiday packages across 24 countries.
Agentic visitor analytics with five tools for CRO and session analysis.
52 paid x402 API endpoints for AI agents — crypto, data, DeFi, and market intelligence, settled on Base.
Access Vonage API documentation, code snippets, tutorials, and troubleshooting resources.
Retrieve a registered agent's full identity profile, including public key, checksum, trust tier, capabilities, and compliance status.
Verify an agent's cryptographic identity by checking public key ownership and checksum integrity. Returns a verification result with confidence score and reason codes.
Retrieve an agent's current multi-pillar trust score (0–1000 scale). Returns composite score, tier, per-pillar breakdown (identity, behavior, fidelity, compliance, provenance), verdict, and max recomm
Quick risk assessment for payment processors and marketplace operators. Returns verdict (ALLOW/REVIEW/BLOCK), trust tier, and max transaction limit. This is the free public endpoint — no API key requi
Bulk ingest behavioral telemetry events for an agent. These events feed into the trust scoring engine. Supports transaction completions, SLA violations, dispute events, tool calls, and more.
Issue a W3C-compatible verifiable credential to an agent. Credentials represent verified claims such as identity verification, compliance certification, or domain expertise.
Verify a previously issued verifiable credential. Checks signature validity, revocation status, and expiration.
Revoke a verifiable credential. Records the revocation in the registry. Revoked credentials immediately fail verification checks.
Get a dynamic insurance premium quote for an agent transaction. Premium is calculated based on trust score, transaction value, and risk tier. HiveTrust takes a 1.5% spread on insured transactions.
Bind (activate) an insurance policy for an agent. Locks in the premium, creates the policy record, and deploys the escrow contract on Base L2.
File an insurance claim against an active policy. Triggers claims adjudication workflow. Payouts are made in USDC via the Base L2 escrow contract.
File a dispute or appeal against a trust score decision, credential revocation, or behavioral event. Initiates the dispute resolution workflow.
Retrieve HiveTrust platform-wide statistics: total registered agents, verified count, average trust score, total insured value, active policies, claims filed, and more.
Create a Data Oracle Context Lease — "Sign Once, Settle Many". Grants unlimited access to a data stream for a fixed period (24h/72h/168h). Returns a cryptographic lease token (SHA-256) for zero-fricti
Stake USDC to back an agent's reputation via HiveBond. Creates a trust bond with a specified tier (bronze/silver/gold/platinum) and lock period. Phase 1: declared stake amount tracked in-memory; flat
Quick bond verification — check if an agent is bonded and at what tier. Returns bonded status, tier, staked amount, slash count, and max bounty access. This is the key integration point — other servic