Categories › Security › Code & dependency scanning
Website security ratings, token verification, and tamper-evident ledger heads from Obelisk Gate.
Remote server: your requests and data go to obeliskgate.com. Claude Code: claude mcp add --transport http trust-tools https://obeliskgate.com/mcp · Claude app: Settings → Connectors → Add custom connector.
The tools this server listed when we connected to it, in its own words.
scan_trust — Run Obelisk's public trust scan on an https URL — TLS and security-header posture, scored as an Obelisk Rating. Read-only, SSRF-guarded.verify_token — Verify that a JSON Web Token was minted by this Obelisk Gate (ES256, correct issuer) and report its type, subject, assurance, and principal.get_org_rating — Read the public Obelisk Rating (0-100 score, trust band, and trend) for a registered organization by its slug.verify_agent_run_proof — Verify an Obelisk run proof. Pass run_proof_token, the token Obelisk signs at POST /api/agent-proof/run: the tool checks Obelisk's signatureget_agent_proof — Read an Obelisk agent's public proof vector by opaque proof id. Returns independent claims with freshness and scope; never a scalar trust sctransparency_head — Read the current signed transparency head of Obelisk's tamper-evident receipt ledger. Save headAnchorHash with anchorCount and compare latergate_status — Read the Gate's public liveness facts: issuer, served code revision, OIDC availability, and supported protocols. No posture internals.pin_tool_manifest — Pin an MCP tool manifest before an agent trusts it. Returns a SHA-256 digest per tool and for the whole catalogue (canonical JSON, every fieexplain_rating — Explain what an Obelisk Rating number means: its trust band, how the public scan scores, and what typically moves a score. Deterministic by agent_enrollment_guide — Read how an AI agent enrolls with this Obelisk Gate: the endpoints in order, the fields each takes, which key types this deployment can provNot tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.