AgentTrust - Identity & Trust for A2A Agents MCP Server
Free email for AI agents, instant messaging between agents, and cloud file storage - accessible as MCP tools from any compatible client. Its 19 documented tools cover agenttrust, email, drive, inbox. It runs locally over stdio via the published package.
People who work with agenttrust, email and drive and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in JavaScript.
VERIFIED ACTIVE
LAST COMMIT 2026-04-09 · ★ 2 · #137 OF 216 MAINTAINED SECURITY · VERIFIED 2026-09-30
MIT · JavaScript servers · how we verify → /methodology
01 · Install AgentTrust - Identity & Trust for A2A Agents
before you install - you'll need
Set AGENTTRUST_API_KEY before connecting.
Claude Code
claude mcp add agenttrust-mcp-server -- npx -y @agenttrust/mcp-server Claude Desktop / Cursor / VS Code - add to config
{
"mcpServers": {
"agenttrust-mcp-server": {
"command": "npx",
"args": [
"-y",
"@agenttrust/mcp-server"
]
}
}
} Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.
Using another client? Same JSON, different key
Claude Desktop · mcpServers
Cursor · mcpServers
VS Code · servers
Windsurf · mcpServers
Zed · context_servers
Cline · mcpServers
Roo Code · mcpServers
Continue · mcpServers
LibreChat · mcpServers
Gemini CLI · mcpServers
Codex CLI · mcp_servers
Full setup guides: every client.
02 · Evidence
Security posture
What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.
runs as local process (stdio) - runs on your machine with your user's permissions
license MIT - declared in the repository
npm package @agenttrust/mcp-server - published under the repo owner's npm scope (@agenttrust)
registry vendor namespace ai.agenttrust - domain-verified with the official MCP registry
03 · What AgentTrust - Identity & Trust for A2A Agents can do
Prose above is summarized from the project's README and registry record - no invented capabilities.
What you can build
With this server connected, an agent can list inbox - filter by direction, status, read email or full thread (thread by default), download attachment - returns signed URL, and send email from agent's address.
The 19 tools it gives your agent
Extracted from the project's README - what AgentTrust - Identity & Trust for A2A Agents lets an agent do.
- agenttrust_email_inbox
- - List inbox - filter by direction, status
- agenttrust_email_read
- - Read email or full thread (thread by default)
- agenttrust_email_attachment
- - Download attachment - returns signed URL
- agenttrust_email_send
- - Send email from agent's address
- agenttrust_email_reply
- - Reply to an email
- agenttrust_email_forward
- - Forward email with attachments
- agenttrust_email_draft
- - Create draft for human review
- agenttrust_send
- - Send a message to another agent
- agenttrust_inbox
- - Check inbox for incoming conversations
- agenttrust_context
- - Get full conversation history
- agenttrust_reply
- - Reply and optionally update status
- agenttrust_comment
- - Add a note without changing turn
show all 19 tools
- agenttrust_escalate
- - Escalate to human review (HITL)
- agenttrust_discover
- - Search the agent directory
- agenttrust_drive_upload
- - Upload file (base64 content)
- agenttrust_drive_list
- - List files, filter by folder
- agenttrust_drive_download
- - Download file - returns signed URL
- agenttrust_drive_delete
- - Delete a file
- agenttrust_drive_usage
- - Check storage usage and limits
Latest releases
v1.2.1 · 2026-04-09
What's new · 7 email tools - inbox, read (with full thread), attachment download, send, reply, forward, draft · 5 cloud storage tools - upload, list, download, delete, usage · Auth fix - uses Authorization: Bearer (was…
v1.0.0 · 2026-02-27
@agenttrust/mcp-server v1.0.0 · The trust layer for autonomous agents - now available as an MCP server. · 13 Tools · A2A Communication · agenttrust_send - Send messages to other agents via A2A relay · agenttrust_inbox…
04 · Who maintains AgentTrust - Identity & Trust for A2A Agents
AgentTrust - Identity & Trust for A2A Agents is maintained by agenttrust. It's the only MCP server we track from this author; the repo dates to Feb 2026.
05 · Facts
- repository
- github.com/agenttrust/mcp-server
- website
- https://agenttrust.ai/
- category
- security - ranked #137 of 216 actively-maintained security servers as of 2026-09-30.
- registry
- ai.agenttrust/mcp-server (active, first published 2026-03-06)
- packages
- npm:@agenttrust/mcp-server
06 · AgentTrust - Identity & Trust for A2A Agents FAQ
Is AgentTrust - Identity & Trust for A2A Agents still maintained?
Yes - as of 2026-09-30, its last commit was 2026-04-09. We re-verify nightly.
What can AgentTrust - Identity & Trust for A2A Agents do?
With this server connected, an agent can list inbox - filter by direction, status, read email or full thread (thread by default), download attachment - returns signed URL, and send email from agent's address.
How do I install AgentTrust - Identity & Trust for A2A Agents?
Run `npx -y @agenttrust/mcp-server`. The README documents one environment variable (AGENTTRUST_API_KEY) to set first. Set AGENTTRUST_API_KEY before connecting. You can also paste the ready-made client config above.
Does AgentTrust - Identity & Trust for A2A Agents run locally?
Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.
07 · Alternatives to AgentTrust - Identity & Trust for A2A Agents
Alternatives to AgentTrust - Identity & Trust for A2A Agents
Maintained security servers if AgentTrust - Identity & Trust for A2A Agents isn't the fit.
- OpenWork MCP Gateway Your OpenWork org's skills, plugins, workflows, and connections through one OAuth MCP URL. ★ 23,783 · 2026-09-29
- Treg To OpenRouter for tools and data. Compare catalog providers and call them from one hosted MCP endpoint. ★ 3,881 · 2026-09-30
- SafeDep Vet MCP Protect your AI agents and IDEs from malicious open-source packages. ★ 1,109 · 2026-09-23
- HOL Guard Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server. ★ 680 · 2026-09-30
- SonarQube MCP Server Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants. ★ 655 · 2026-09-29
- Decionis CommerceGate MCP Commerce preflights, D365 authorization, signed evidence, and reports; no marketplace or ERP writes. ★ 589 · 2026-09-28
Pairs well with
Servers that cover what AgentTrust - Identity & Trust for A2A Agents doesn't - only shown when the pairing reason fits the companion.
More security MCP servers · Enigmagent MCP · Prism Scanner · AIGEN - Open Bounty Protocol for AI Agents · Healthclaw Guardrails · Linkedctl
More JavaScript MCP servers · Agirails MCP Server · Remote OpenClaw · Aiqbee Brain · Arduino MCP Server (akshatnerella) · see all