{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T20:04:46.361Z","url":"https://verifymcp.io/servers/io-trustonion-scam-check/trustonion","markdownUrl":"https://verifymcp.io/servers/io-trustonion-scam-check/trustonion.md","server":{"slug":"io-trustonion-scam-check","name":"Trust Onion Scam Check","registryName":"io.trustonion/scam-check","description":"Verified AI voice-clone scam incidents, loss stats, and a family verification protocol. Keyless.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"trustonion","type":"remote","identifier":"https://trustonion.io/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/io-trustonion-scam-check/trustonion","version":"1.1.0","transport":null,"scoredAt":"2026-11-05T03:06:31.253Z"},"score":{"total":83,"tier":"high trust","status":"scored","weekDelta":3,"history":[{"date":"2026-11-05","total":83},{"date":"2026-11-04","total":83},{"date":"2026-11-03","total":82},{"date":"2026-11-02","total":82},{"date":"2026-11-01","total":81},{"date":"2026-10-31","total":81},{"date":"2026-10-30","total":80},{"date":"2026-10-29","total":80},{"date":"2026-10-28","total":79},{"date":"2026-10-27","total":79},{"date":"2026-10-26","total":78},{"date":"2026-10-25","total":78},{"date":"2026-10-24","total":77},{"date":"2026-10-23","total":77},{"date":"2026-10-22","total":76},{"date":"2026-10-21","total":76},{"date":"2026-10-20","total":76},{"date":"2026-10-19","total":75},{"date":"2026-10-18","total":75},{"date":"2026-10-17","total":74},{"date":"2026-10-16","total":74},{"date":"2026-10-15","total":73},{"date":"2026-10-14","total":73},{"date":"2026-10-13","total":72},{"date":"2026-10-12","total":72}]},"categories":[{"name":"Endpoint Security","score":80,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation.","HTTPS is enforced; there's no plaintext access path.","The HSTS (Strict-Transport-Security) header is present.","DNSSEC check failed: this domain isn't protected by DNSSEC."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.none_no_destructive","args":{}},{"code":"https.enforced","args":{}},{"code":"headers.hsts_present","args":{}},{"code":"dnssec.absent","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":78,"verdict":"fail","reasons":["100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).","AI-judged instruction clarity (good).","Tool/resource definitions use about 839 tokens (~69/item across 12 items; 7 tools + 5 resources), lean.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.descriptions","args":{"pct":"100"}},{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_lean","args":{"avg":"69","items":"12","tools":"7","tokens":"839","resources":"5"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":80,"verdict":"partial","reasons":["Stability observed for 24 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"24"}}]},{"name":"Tool Coverage","score":71,"verdict":"fail","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","0% of tool parameters carry a description.","Structured output schemas are declared (100% of tools); any adoption earns full credit."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"0"}},{"code":"toolquality.output_present","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 7 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 9 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"7"}},{"code":"toolsafety.manipulation_clean","args":{"units":"9","judged":"9"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"trustonion","type":"remote","identifier":"https://trustonion.io/mcp","withdrawn":false,"score":83,"current":true,"url":"https://verifymcp.io/servers/io-trustonion-scam-check/trustonion","markdownUrl":"https://verifymcp.io/servers/io-trustonion-scam-check/trustonion.md"}],"facts":[{"label":"Endpoint","value":"https://trustonion.io/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"none"},{"label":"Version","value":"1.1.0"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"search_incidents","title":"Search verified scam incidents","description":"Search verified, published Trust Onion Pulse (Voice Clone Scam Pulse) incidents by attack type, victim type, country, outcome, incident year, publication date range, and keyword. Returns compact summaries (newest first by default), a total count, and nextCursor for the next page. Call get_incident with a slug for full detail.","inputs":[{"name":"attackType","type":"string","required":false,"description":null},{"name":"country","type":"string","required":false,"description":null},{"name":"cursor","type":"string","required":false,"description":null},{"name":"keyword","type":"string","required":false,"description":null},{"name":"limit","type":"integer","required":false,"description":null},{"name":"outcome","type":"string","required":false,"description":null},{"name":"since","type":"string","required":false,"description":null},{"name":"sort","type":"string","required":false,"description":null},{"name":"until","type":"string","required":false,"description":null},{"name":"victimType","type":"string","required":false,"description":null},{"name":"year","type":"integer","required":false,"description":null}],"outputs":[{"name":"appliedFilters","type":"object","required":true,"description":null},{"name":"asOf","type":"string","required":true,"description":null},{"name":"availableFilterValues","type":"object","required":false,"description":null},{"name":"citation","type":"object","required":true,"description":null},{"name":"contentRevision","type":"string","required":true,"description":null},{"name":"incidents","type":"array","required":true,"description":null},{"name":"limit","type":"integer","required":true,"description":null},{"name":"nextCursor","type":null,"required":true,"description":null},{"name":"offset","type":"integer","required":true,"description":null},{"name":"protocolVersion","type":"string","required":true,"description":null},{"name":"returned","type":"integer","required":true,"description":null},{"name":"sort","type":"string","required":true,"description":null},{"name":"total","type":"integer","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":156},{"name":"get_incident","title":"Get a verified incident","description":"Get the full published Trust Onion case study for one verified incident by slug, including source reporting and prevention analysis.","inputs":[{"name":"slug","type":"string","required":true,"description":null}],"outputs":[{"name":"asOf","type":"string","required":true,"description":null},{"name":"citation","type":"object","required":true,"description":null},{"name":"contentRevision","type":"string","required":true,"description":null},{"name":"incident","type":"object","required":true,"description":null},{"name":"protocolVersion","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":38},{"name":"get_scam_stats","title":"Get current scam statistics","description":"Return the current Trust Onion Pulse summary (all time, or for one incident year), including conservative loss classifications. Only explicitly-USD losses are summed.","inputs":[{"name":"year","type":"integer","required":false,"description":null}],"outputs":[{"name":"asOf","type":"string","required":true,"description":null},{"name":"citation","type":"object","required":true,"description":null},{"name":"contentRevision","type":"string","required":true,"description":null},{"name":"protocolVersion","type":"string","required":true,"description":null},{"name":"scope","type":"string","required":true,"description":null},{"name":"stats","type":"object","required":true,"description":null},{"name":"year","type":null,"required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":47},{"name":"explain_scam_type","title":"Explain an AI scam type","description":"Explain a documented editorial scam pattern with published article evidence, or a Trust Onion topic hub with warning signs and protection steps. Editorial coverage is not a verified incident count.","inputs":[{"name":"scamType","type":"string","required":true,"description":null}],"outputs":[{"name":"asOf","type":"string","required":true,"description":null},{"name":"citation","type":"object","required":true,"description":null},{"name":"contentRevision","type":"string","required":true,"description":null},{"name":"kind","type":"string","required":true,"description":null},{"name":"protocolVersion","type":"string","required":true,"description":null},{"name":"scamType","type":"object","required":true,"description":null},{"name":"scope","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":51},{"name":"list_scam_types","title":"List documented scam patterns","description":"List the current editorial scam patterns and published article links, separately from verified incident statistics.","inputs":[],"outputs":[{"name":"asOf","type":"string","required":true,"description":null},{"name":"citation","type":"object","required":true,"description":null},{"name":"contentRevision","type":"string","required":true,"description":null},{"name":"data","type":"array","required":true,"description":null},{"name":"protocolVersion","type":"string","required":true,"description":null},{"name":"revision","type":"string","required":true,"description":null},{"name":"scope","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":27},{"name":"get_verification_protocol","title":"Get the Three Words Check","description":"Return Trust Onion's five-step family verification protocol for suspicious calls, texts, and video calls.","inputs":[],"outputs":[{"name":"asOf","type":"string","required":true,"description":null},{"name":"citation","type":"object","required":true,"description":null},{"name":"contentRevision","type":"string","required":true,"description":null},{"name":"protocol","type":"string","required":true,"description":null},{"name":"protocolVersion","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":29},{"name":"assess_call_scenario","title":"Assess a suspicious call or message","description":"Deterministically match a described call or text to current scam hubs, red flags, and the recommended verification step. No external LLM is used.","inputs":[{"name":"scenario","type":"string","required":true,"description":null}],"outputs":[{"name":"asOf","type":"string","required":true,"description":null},{"name":"assessment","type":"object","required":true,"description":null},{"name":"citation","type":"object","required":true,"description":null},{"name":"contentRevision","type":"string","required":true,"description":null},{"name":"protocolVersion","type":"string","required":true,"description":null},{"name":"scenario","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":47}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T03:06:31.000Z","track":"remote","endpoint":"https://trustonion.io/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=trustonion.io","issuer":"CN=YE1,O=Let's Encrypt,C=US","notBefore":"2026-10-04T23:45:52Z","notAfter":"2027-01-02T23:45:51Z","keyType":"ECDSA","keyBits":256,"isCa":false},{"subject":"CN=YE1,O=Let's Encrypt,C=US","issuer":"CN=Root YE,O=ISRG,C=US","notBefore":"2025-09-03T00:00:00Z","notAfter":"2028-09-02T23:59:59Z","keyType":"ECDSA","keyBits":384,"isCa":true},{"subject":"CN=Root YE,O=ISRG,C=US","issuer":"CN=ISRG Root X2,O=Internet Security Research Group,C=US","notBefore":"2026-05-13T00:00:00Z","notAfter":"2032-09-02T23:59:59Z","keyType":"ECDSA","keyBits":384,"isCa":true},{"subject":"CN=ISRG Root X2,O=Internet Security Research Group,C=US","issuer":"CN=ISRG Root X1,O=Internet Security Research Group,C=US","notBefore":"2026-05-13T00:00:00Z","notAfter":"2032-09-02T23:59:59Z","keyType":"ECDSA","keyBits":384,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"trustonion.io.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"io.","outcome":"verified","label":"Verified"},{"zone":"trustonion.io.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"none","label":"No authorisation required","gate":null,"gateLabel":null,"status":200,"authorizationServers":[]},"httpsRedirect":{"outcome":"https_enforced","label":"HTTPS enforced","status":301},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-12","recent":[{"id":"chg_01a1a485-f3b7-794a-9c44-75aad272ef7d","kind":"score.total_changed","summary":"Trust score (82 → 83)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/io-trustonion-scam-check/trustonion#chg-chg_01a1a485-f3b7-794a-9c44-75aad272ef7d"},{"id":"chg_01a19a39-2dcb-7885-b64d-7248ee8a21c4","kind":"score.total_changed","summary":"Trust score (81 → 82)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/io-trustonion-scam-check/trustonion#chg-chg_01a19a39-2dcb-7885-b64d-7248ee8a21c4"},{"id":"chg_01a18feb-ff15-74ca-873b-d9dde543e7d7","kind":"score.total_changed","summary":"Trust score (80 → 81)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/io-trustonion-scam-check/trustonion#chg-chg_01a18feb-ff15-74ca-873b-d9dde543e7d7"},{"id":"chg_01a185a1-17ec-794b-b832-85347e71ba0a","kind":"score.total_changed","summary":"Trust score (79 → 80)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/io-trustonion-scam-check/trustonion#chg-chg_01a185a1-17ec-794b-b832-85347e71ba0a"},{"id":"chg_01a17b54-0420-72e5-83e7-a525946a2e44","kind":"score.total_changed","summary":"Trust score (78 → 79)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-27","url":"https://verifymcp.io/servers/io-trustonion-scam-check/trustonion#chg-chg_01a17b54-0420-72e5-83e7-a525946a2e44"},{"id":"chg_01a17107-e49c-75c9-8005-fc7d0037e1ea","kind":"score.total_changed","summary":"Trust score (77 → 78)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/io-trustonion-scam-check/trustonion#chg-chg_01a17107-e49c-75c9-8005-fc7d0037e1ea"},{"id":"chg_01a166ba-28ed-7483-ae34-db0dfb990a85","kind":"score.total_changed","summary":"Trust score (76 → 77)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-23","url":"https://verifymcp.io/servers/io-trustonion-scam-check/trustonion#chg-chg_01a166ba-28ed-7483-ae34-db0dfb990a85"},{"id":"chg_01a15746-956b-78ac-a74a-f6373d915f04","kind":"score.total_changed","summary":"Trust score (75 → 76)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-20","url":"https://verifymcp.io/servers/io-trustonion-scam-check/trustonion#chg-chg_01a15746-956b-78ac-a74a-f6373d915f04"},{"id":"chg_01a14cfa-0e93-7cfa-8754-d43bbadab45d","kind":"score.total_changed","summary":"Trust score (74 → 75)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-18","url":"https://verifymcp.io/servers/io-trustonion-scam-check/trustonion#chg-chg_01a14cfa-0e93-7cfa-8754-d43bbadab45d"},{"id":"chg_01a142ae-bbe0-7231-b107-cf954fb7d8c9","kind":"score.total_changed","summary":"Trust score (73 → 74)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-16","url":"https://verifymcp.io/servers/io-trustonion-scam-check/trustonion#chg-chg_01a142ae-bbe0-7231-b107-cf954fb7d8c9"},{"id":"chg_01a13861-62e9-7d55-a957-4af51875dc13","kind":"score.total_changed","summary":"Trust score (72 → 73)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-14","url":"https://verifymcp.io/servers/io-trustonion-scam-check/trustonion#chg-chg_01a13861-62e9-7d55-a957-4af51875dc13"},{"id":"chg_01a13339-1dec-748d-a155-aef2f765357f","kind":"check.reverified","summary":"Stability (unverified → 0.03)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-13","url":"https://verifymcp.io/servers/io-trustonion-scam-check/trustonion#chg-chg_01a13339-1dec-748d-a155-aef2f765357f"},{"id":"chg_01a12e6e-3719-740c-b54a-fddafa383aa9","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-12","url":"https://verifymcp.io/servers/io-trustonion-scam-check/trustonion#chg-chg_01a12e6e-3719-740c-b54a-fddafa383aa9"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/io-trustonion-scam-check/trustonion/changelog.json"},"links":{"html":"https://verifymcp.io/servers/io-trustonion-scam-check/trustonion","markdown":"https://verifymcp.io/servers/io-trustonion-scam-check/trustonion.md","changelogJson":"https://verifymcp.io/servers/io-trustonion-scam-check/trustonion/changelog.json","changelogRss":"https://verifymcp.io/servers/io-trustonion-scam-check/trustonion.xml","external":[{"label":"Remote endpoint","href":"https://trustonion.io/mcp"},{"label":"Website","href":"https://trustonion.io/for-ai-agents"}]}}