What is the key difference between Agentforge Trust MCP and Sast MCP Server?

Agentforge Trust MCP belongs to the Security category with local stdio execution, while Sast MCP Server belongs to the Security category with local stdio execution.

How do I install Agentforge Trust MCP or Sast MCP Server in Claude Desktop or Cursor?

Copy the mcpServers JSON configuration snippet provided on this page into your claude_desktop_config.json or ~/.cursor/mcp.json file and restart your AI client.

Are Agentforge Trust MCP and Sast MCP Server free or paid?

Agentforge Trust MCP operates under a Freemium model (API Key required). Sast MCP Server operates under a Free / Open Source model (API Key required).

Which MCP server has more tools and community activity?

Agentforge Trust MCP lists 8 tools with 2 views and 1 GitHub stars. Sast MCP Server lists 27 tools with 2 views and 3 GitHub stars.

Can I use both Agentforge Trust MCP and Sast MCP Server together in the same MCP host?

Yes! MCP hosts like Claude Desktop, Cursor, Windsurf, Cline, and VS Code support configuring multiple servers under the mcpServers object simultaneously.

Side-by-Side Model Context Protocol Comparison

Agentforge Trust MCP vs Sast MCP Server

In-depth architectural comparison of the Agentforge Trust MCP and Sast MCP Server MCP servers. Compare execution transports, security boundaries, tool capabilities, quality scores, and ready-to-paste client installation snippets for Claude, Cursor, Windsurf, and VS Code.

At a Glance & Executive Verdict

Agentforge Trust MCP

Security · Local stdio

Quality: 55/100 (Good) | Auth: API Key required

Sast MCP Server

Security · Local stdio

Quality: 57/100 (Good) | Auth: API Key required

Verdict Summary: Choose Agentforge Trust MCP if you need specialized Security tools running via a local process. Choose Sast MCP Server if your workspace requires Security integration with local subprocess execution. Both servers can be configured concurrently in your client's mcpServers manifest.

Which MCP Server Should You Choose?

Choose Agentforge Trust MCP when:

You need dedicated capabilities in the Security domain.
You prefer local stdio subprocess transport architecture.
Your security boundary fits: API Key required (Freemium).
Primary tools included: check_trust, evaluate_policy, list_trusted.

Explore Agentforge Trust MCP Details

Choose Sast MCP Server when:

You need dedicated capabilities in the Security domain.
You prefer local stdio subprocess transport architecture.
Your security boundary fits: API Key required (Free / Open Source).
You have access to required keys: DEFECTDOJO_URL, GITHUB_TOKEN, JIRA_URL, JIRA_EMAIL, JIRA_API_TOKEN.
Primary tools included: scan_vulnerabilities, ignore_vulnerability, unignore_vulnerability.

Feature & Specification Comparison

Specification	Agentforge Trust MCP KOVY Security	Sast MCP Server Skyrxin Security
Summary	Query the AgentForge Trust Score (0-100 across five dimensions: security, code health, behavioral audit, community trust, EU compliance) for any MCP server before connecting. Exposes checktrust, evaluatepolicy, listtrusted, and recommend tools. 3,600+ servers audited, free public API.	SAST/DAST server exposing 11 security scanners (Bandit, Semgrep, Trivy, CodeQL, Checkov, Gitleaks, OSV-Scanner, Grype, OWASP ZAP, and more) with closed-loop remediation (scan→patch→re-scan→verify), SARIF/SBOM/VEX export, compliance reporting, and CI integrations (GitHub Advanced Security, DefectDojo, Slack, Jira).
Category & Scope

Tools & Capabilities Breakdown

Agentforge Trust MCP Tools (8)

check_trust

Fetch the AgentForge Trust Score for an MCP server. Returns the overall score (0-100), per-dimension breakdown (code_health, security_scan, behavioral_audit, community_trust, eu_compliance), and badges. Use before connecting to any MCP server.

evaluate_policy

Check whether a server passes a trust policy. Returns allowed:true/false plus individual check results. Example policy: {min_overall: 70, required_badges: ['actively_maintained']}. Use this to gate agent decisions like 'should I use this server for financial data?'.

list_trusted

Search AgentForge catalog for servers matching a category and minimum trust threshold. Returns up to 25 results sorted by trust score.

recommend

Given a natural-language use case, recommend MCP servers filtered by trust. Example: 'I need to validate Czech VAT IDs and convert ISDOC invoices'. Uses AgentForge semantic search + trust filter.

discover

Ready-to-Paste Client Configurations

Paste either (or both) of these JSON server blocks into your client config file (e.g. claude_desktop_config.json or ~/.cursor/mcp.json).

Agentforge Trust MCP Configuration

mcpServers (Claude Desktop / Cursor)

{
  "mcpServers": {
    "kovy-agentforge-trust-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "agentforge-trust-mcp@latest"
      ]
    }
  }
}

Sast MCP Server Configuration

mcpServers (Claude Desktop / Cursor)

{
  "mcpServers": {
    "skyrxin-sast-mcp-server": {
      "command": "uvx",
      "args": [
        "sast-mcp-server"
      ],
      "env": {
        "DEFECTDOJO_URL": "YOUR_DEFECTDOJO_URL_HERE",
        "GITHUB_TOKEN": "YOUR_GITHUB_TOKEN_HERE",
        "JIRA_URL": "YOUR_JIRA_URL_HERE",
        "JIRA_EMAIL": "YOUR_JIRA_EMAIL_HERE",
        "JIRA_API_TOKEN": "YOUR_JIRA_API_TOKEN_HERE"
      }
    }
  }
}

Frequently Asked Questions

Agentforge Trust MCP is categorized under Security and uses a local stdio subprocess. In contrast, Sast MCP Server belongs to Security using local stdio subprocess. Select Agentforge Trust MCP when you need capabilities focused on security and Sast MCP Server when you require tools for security.

More alternatives to Agentforge Trust MCP More alternatives to Sast MCP Server Security category hub