Who it is for
Developers and security reviewers deciding whether to connect a third-party MCP server.
Trust scoring for MCP servers and packages
Overview
ToolCheck examines MCP tools before they get connected. Given a GitHub URL or an npm package name it returns a score between 0 and 100 with a verdict of Trusted, Caution, or Concern.
Four methods feed that judgment. Static analysis reads the code as written. Sandboxed execution watches how it behaves at runtime. CVE scanning covers known vulnerabilities. A semantic check then holds the tool's declared behavior against what the code can do, looking for the gap where something advertised as read-only market data turns out to have the ability to move funds.
The record describes the score as independent, produced apart from the publisher of the tool under examination. M8ven Inc. positions the app as a trust layer for the wider MCP ecosystem.
Developers and security reviewers deciding whether to connect a third-party MCP server.
The semantic comparison of stated purpose against actual code catches mismatches a vulnerability scan alone would miss.
Availability
ToolCheck by M8ven is listed in the ChatGPT apps directory only. M8ven Inc. has no connector under the same domain in the Claude directory; 392 of the 3,150 products here are on both marketplaces, and this is not one of them.
ChatGPT apps are built on MCP, and the same server can back a Claude connector, so the absence is a distribution decision rather than a technical one.
ChatGPT listing
Same company
Brand and store trust checks before buying
Claude · ChatGPT
Nearby
Internal SaaS app catalogue and access requests
ChatGPT
Read-only explainer for data broker exposure
ChatGPT
Compliance posture and evidence review inside chat
ChatGPT
Free URL check for malware and phishing
ChatGPT
Cryptographic proof of authorship for written work
ChatGPT
VPN server picks and connection troubleshooting
ChatGPT
This is an independent catalogue entry compiled by Node8 from ToolCheck by M8ven's public marketplace listing as it stood in August 2026. Listing facts come from the marketplaces; the comparisons against the rest of the directory and any live-endpoint measurements are Node8's. Node8 is not affiliated with M8ven Inc., and inclusion here is not an endorsement.
Node8 builds MCP servers end to end: deciding which tools are worth exposing, the authentication and permission model, the review submissions, and the onboarding that gets them used. One server serves ChatGPT, Claude, and Microsoft Copilot.