1. Conduid
  2. Cloud
  3. Toolmoat
MCP server · Cloud

Toolmoat

by · github.com/Whitul/toolmoat

Local-first security scanner and runtime firewall for AI agent skills, plugins, hooks and MCP servers. No account, no cloud, no telemetry.

Unclaimed agent-skillsai-agentsclaude-codeclimcpmodel-context-protocolprompt-injectionsarifsecuritysupply-chain-security
InstallView source
33Low

Scored just now · breakdown

About Toolmoat

Toolmoat is an MCP server published by Whitul in the Cloud category: local-first security scanner and runtime firewall for AI agent skills, plugins, hooks and MCP servers. No account, no cloud, no telemetry.

Recent commit activity is the strongest signal that reported issues will get attention.

Install

Claude Code
claude mcp add toolmoat -- npx -y toolmoat
npx
npx -y toolmoat
From source
git clone https://github.com/Whitul/toolmoat

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Toolmoat

Powered by Claude

Ask about Toolmoat — answers draw on its README.

Security checks

6 checks have not been run yet.

Questions

About Toolmoat

How do I install Toolmoat?

In Claude Code, run claude mcp add toolmoat -- npx -y toolmoat. Other MCP clients take the command after "--" in their server configuration.

Is Toolmoat safe to use with an AI agent?

Its trust score is 33 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Toolmoat still maintained?

Yes — the last commit was 3 days ago. The repository has 0 stars and 0 forks.