{
  "schema_version": "2025-06-18",
  "name": "trusta",
  "title": "Trusta",
  "description": "Look up live, verified trust data for software vendors — published trust profiles, controls with evidence, and raw signals. All data is computed from real infrastructure, never self-reported.",
  "version": "1.0.0",
  "websiteUrl": "https://trusta.dev",
  "documentationUrl": "https://trusta.dev/developers",
  "privacyPolicyUrl": "https://trusta.dev/privacy",
  "termsOfServiceUrl": "https://trusta.dev/terms",
  "contactEmail": "hello@trusta.dev",
  "endpoints": [
    {
      "type": "streamable-http",
      "url": "https://api.trusta.dev/mcp",
      "authentication": { "type": "none" }
    }
  ],
  "remotes": [
    {
      "type": "streamable-http",
      "url": "https://api.trusta.dev/mcp"
    }
  ],
  "supportedProtocolVersions": ["2024-11-05", "2025-06-18"],
  "capabilities": {
    "tools": { "listChanged": false }
  },
  "tools": [
    {
      "name": "get_trust_profile",
      "description": "Retrieve a published trust profile for a software company by its Trusta project slug. Returns security posture, trust status, and verification metadata."
    },
    {
      "name": "get_trust_controls",
      "description": "List trust controls and evidence for a Trusta project. Controls are specific security requirements with pass/fail state and evidence links."
    },
    {
      "name": "get_trust_signals",
      "description": "List trust signals with timestamps for a Trusta project. Signals are raw data points produced by collectors."
    },
    {
      "name": "get_trust_json",
      "description": "Fetch the machine-readable trust state for a Trusta project as a structured JSON object."
    }
  ]
}