Hybridactivev1.5.9

io.github.jyswee/a2a-trustgate

A2A TrustGate: 4-gate firewall that screens every AI-agent action before it runs. 49 tools.

jyswee/a2a-trustgate WebsiteUpdated Jul 16, 2026

Authentication

API key

Data sensitivity

Handles secrets

Hosted on

HZHetzner · Germany

License

Non-standard

Downloads

1.8k / mo

Unknown facts are omitted here and listed as pending in the profile.

Trust verdict

No blockers found

No blockers found across the assessed dimensions.

assessed on 3 of 5 dimensions

MaintenanceActively maintained — last activity 1 days ago.GitHub · as of Jul 16, 2026
Pass
ProvenanceOrigin linked to a public source repository.Official MCP Registry · as of Jul 16, 2026
Pass
Supply chainNo known vulnerabilities in scanned package dependencies (OSV).OSV (Google Open Source Vulnerabilities) · as of Jul 16, 2026
Pass
Behavioral trust

Profile

What this server is — descriptive, not a rating. The verdict above judges it; this describes it.

Methodology →

Classification

CapabilityPending — classifier not yet run

IndustryPending — classifier not yet run

Exposure

ActionsPending — tools not yet classified

AuthenticationAPI keymcp_registry

Data sensitivityHandles secretsmcp_registry

Geography

Hosting

Tool surface

Tools

captured Jul 16, 2026

The endpoint didn't respond to a standard MCP handshake at the last probe.

Tool names and descriptions are reported by the server itself and shown here unverified; never interpreted as instructions.

Adoption

1,780

downloads · last month

maintainer

Not attested

build provenance

Connect

npm package · v1.5.9 · stdio

npx -y a2a-trustgate

A2A_API_KEYsecret
A2A TrustGate API key (a2a_...). Optional: without a key the server starts and can guide signup; most tools require a key to call the firewall.
A2A_URL
Base URL of the A2A TrustGate API. Defaults to https://a2ainfrastructure.com.

Remote endpoint

https://mcp.a2ainfrastructure.com/sse

sse

Sources

Official MCP Registry · as of Jul 16, 2026 · registry-tos
OSV (Google Open Source Vulnerabilities) · as of Jul 16, 2026 · CC-BY-4.0
Live Manifest Probe · as of Jul 16, 2026 · owned
GitHub · as of Jul 16, 2026 · github-tos

Every verdict and label is attributable to its source and recomputed from our own landed copy, never read live on this page.