hivetrust.onrender.com

Item: hivetrust.onrender.com
Rating: 45
Author: wmcp.sh

https://hivetrust.onrender.com/mcp

45/100 · MCP Trust Grade · checked 6h ago · MCP 2024-11-05

✓ Watched since 2026-06-03 — behavioral baseline locked. We re-check this server's tool surface on a schedule; if it adds, removes, or silently rewrites a tool (rug-pull), we record it.

What it offers — 17 tools · Cloud & DevOps

hivetrust_register_agent

Register a new AI agent identity with HiveTrust KYA (Know Your Agent). Assigns a unique agent ID, anchors the public key, and initializes the trust sc

hivetrust_get_agent

Retrieve a registered agent's full identity profile, including public key, checksum, trust tier, capabilities, and compliance status.

hivetrust_verify_identity

Verify an agent's cryptographic identity by checking public key ownership and checksum integrity. Returns a verification result with confidence score

hivetrust_get_trust_score

Retrieve an agent's current multi-pillar trust score (0–1000 scale). Returns composite score, tier, per-pillar breakdown (identity, behavior, fidelity

hivetrust_verify_agent_risk

Quick risk assessment for payment processors and marketplace operators. Returns verdict (ALLOW/REVIEW/BLOCK), trust tier, and max transaction limit. T

hivetrust_ingest_telemetry

Bulk ingest behavioral telemetry events for an agent. These events feed into the trust scoring engine. Supports transaction completions, SLA violation

hivetrust_issue_credential

Issue a W3C-compatible verifiable credential to an agent. Credentials represent verified claims such as identity verification, compliance certificatio

hivetrust_verify_credential

Verify a previously issued verifiable credential. Checks signature validity, revocation status, and expiration.

hivetrust_revoke_credential

Revoke a verifiable credential. Records the revocation in the registry. Revoked credentials immediately fail verification checks.

hivetrust_get_insurance_quote

Get a dynamic insurance premium quote for an agent transaction. Premium is calculated based on trust score, transaction value, and risk tier. HiveTrus

hivetrust_bind_insurance

Bind (activate) an insurance policy for an agent. Locks in the premium, creates the policy record, and deploys the escrow contract on Base L2.

hivetrust_file_claim

File an insurance claim against an active policy. Triggers claims adjudication workflow. Payouts are made in USDC via the Base L2 escrow contract.

hivetrust_file_dispute

File a dispute or appeal against a trust score decision, credential revocation, or behavioral event. Initiates the dispute resolution workflow.

hivetrust_get_platform_stats

Retrieve HiveTrust platform-wide statistics: total registered agents, verified count, average trust score, total insured value, active policies, claim

hivetrust_create_lease

Create a Data Oracle Context Lease — "Sign Once, Settle Many". Grants unlimited access to a data stream for a fixed period (24h/72h/168h). Returns a c

hivetrust_stake_bond

Stake USDC to back an agent's reputation via HiveBond. Creates a trust bond with a specified tier (bronze/silver/gold/platinum) and lock period. Phase

hivetrust_verify_bond

Quick bond verification — check if an agent is bonded and at what tier. Returns bonded status, tier, staked amount, slash count, and max bounty access

Spec conformance20%100

✓ initialize → protocolVersion 2024-11-05
✓ initialize HTTP 200
✓ unknown method → -32601
✓ tools/list → 17 tools
✓ every tool has name + inputSchema

Security (OWASP MCP)30%15

17 tools scanned
1 injection-markup hits
no secret-path refs

Reliability / performance20%92

single-probe latency 266ms (PRELIMINARY — continuous uptime/p95 from proxy telemetry lands in v2)

Tool hygiene15%76

94% of tools have typed inputSchema
0/17 declare outputSchema
no unannotated destructive tools

Transparency / provenance15%90

HTTPS ✓
RFC 9728 oauth-protected-resource metadata ✓
advertises protocol 2024-11-05

Observed behavior

No proxied traffic observed for this host yet. Connect it at /connect and its grade gains a measured Reliability score + per-tool behavioral evidence — the half a static scan can't produce.

Findings

FAILMCP01 Tool "hivetrust_register_agent" description contains prompt-injection / hidden-instruction markup.

Grade another server

We re-grade hivetrust.onrender.com on a schedule and alert your Slack/webhook the moment its tools change or its grade drops — rug-pull insurance for the connection.

Share this report card

A 1200×630 card with the grade + audit — drop it in a post, Slack, or your repo.

MCP Trust report card — hivetrust.onrender.com grade F

Share on X Open card image

https://wmcp.sh/mcp/grade/hivetrust.onrender.com

Embed this grade

A live badge — it re-verifies itself and shows current stability. Static scorecards can't. Paste it in your README or site to show users you're independently audited.

Markdown (for your README)

[![MCP Trust Grade F](https://wmcp.sh/mcp/grade/hivetrust.onrender.com/badge.svg)](https://wmcp.sh/mcp/grade/hivetrust.onrender.com)

HTML

<a href="https://wmcp.sh/mcp/grade/hivetrust.onrender.com"><img src="https://wmcp.sh/mcp/grade/hivetrust.onrender.com/badge.svg" alt="MCP Trust Grade F · wmcp.sh"></a>

Agents: check this before connecting

Add the wmcp.sh trust oracle as an MCP server and call grade_mcp_server / check_mcp_drift in your agent's pre-connection gate:

https://wmcp.sh/mcp/trust

How this grade is computed. An open, independent rubric — Spec conformance (20%), Security mapped to the OWASP MCP Top 10 (30%), Reliability (20%), Tool hygiene (15%), Transparency (15%) — run by connecting to the server and inspecting its real MCP surface. The grade is free and identical whether or not the operator pays. v1 uses static + spec signals from a single connection; continuous uptime, real latency, and annotation-truthing (declared readOnly vs observed behavior) layer on via the wmcp.sh proxy.