Hi, I built OpenTrustBench (free OSS scanner that grades MCP servers A-F: 8 OWASP-mapped static rules, permission manifest, fully local, zero telemetry). I scanned csharp-sdk at df11d7d: A (93/100), full file:line evidence here: https://www.opentrustbench.com/r/modelcontextprotocol-csharp-sdk.html
Badge for your README if you want it:
Registry re-scans weekly, happy to re-run on request. If any finding looks wrong I want to know, false positives are my problem to fix. Tool: https://github.com/eulogik/OpenTrustBench
Hi, I built OpenTrustBench (free OSS scanner that grades MCP servers A-F: 8 OWASP-mapped static rules, permission manifest, fully local, zero telemetry). I scanned csharp-sdk at
df11d7d: A (93/100), full file:line evidence here: https://www.opentrustbench.com/r/modelcontextprotocol-csharp-sdk.htmlBadge for your README if you want it:
Registry re-scans weekly, happy to re-run on request. If any finding looks wrong I want to know, false positives are my problem to fix. Tool: https://github.com/eulogik/OpenTrustBench