MCP, MCP server
DJZS Trust MCP
Deterministic pre-execution audit for trading agents.
Compatibility: Not stated.
Grade B
Minor issues only, no Medium or High. Worth a quick look at the findings below before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
Rescanned at commit dd625b1894bc.
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_DOTENV PERMISSION_SHELL_DECLARED SECRETS_ENV_READ OBFUSCATION_FILE_OVER_READ_CAP OBFUSCATION_FILE_CAP_REACHED
Why this grade
- NETWORK_NO_FIXED_HOST Low
Makes a network call whose host is not written as a fixed address.
cli/src/commands/audit.ts, line 117
const res = await fetch(`${apiUrl}/api/audit`, { - NETWORK_UNNAMED_HOST Low
Calls a fixed host that the description does not name.
cli/src/commands/audit.ts, line 117
const res = await fetch(`${apiUrl}/api/audit`, { - SECRETS_PATH_DOTENV Low
Mentions a .env file.
CLAUDE.md, line 65
npx tsx --env-file=.env.test server/engine-v2/calibration/run-live.ts - PERMISSION_SHELL_DECLARED Note
Runs shell commands, and the manifest or description says so.
packages/patronvault/lib/forge-std/scripts/vm.py, line 106
res = subprocess.run(forge_fmt) - SECRETS_ENV_READ Note
Reads an environment variable whose name contains KEY, SECRET, TOKEN, PASSWORD or CREDENTIAL.
hardhat.config.cjs, line 22
apiKey: process.env.BASESCAN_API_KEY || "", - OBFUSCATION_FILE_OVER_READ_CAP Note
A file was over the read cap and was not fully read.
package-lock.json, line 1
{ - OBFUSCATION_FILE_CAP_REACHED Note
The 400 file cap was reached before every file was read.
package-lock.json, line 1
{
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Note
requests shell access. The manifest names this permission.
PERMISSION_SHELL_DECLARED
packages/patronvault/lib/forge-std/scripts/vm.py, line 106
res = subprocess.run(forge_fmt)
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Concern
can reach a host that is not written as a fixed address. can reach api.anthropic.com. The description does not name that host.
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST
cli/src/commands/audit.ts, line 117
const res = await fetch(`${apiUrl}/api/audit`, {
cli/src/commands/health.ts, line 33
const res = await fetch(`${baseUrl}/api/health`, {
djzs-trust-mcp/agent/refusal-agent.mjs, line 205
const r = await fetch(url, {
Show more
djzs-trust-mcp/agent/refusal-agent.mjs, line 415
const res = await fetch(input, init);
djzs-trust-mcp/harness/anchor-correction.ts, line 208
const res = await fetch(url, {
djzs-trust-mcp/harness/buyer-probe.mjs, line 255
const unpaid = await fetch(args.url, {
djzs-trust-mcp/harness/buyer-probe.mjs, line 287
const paid = await fetch(args.url, {
djzs-trust-mcp/harness/pol-irys-fund.ts, line 86
const res = await fetch(url)
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_DOTENV
hardhat.config.cjs, line 22
apiKey: process.env.BASESCAN_API_KEY || "",
djzs-trust-mcp/agent/refusal-agent.mjs, line 576
const key = process.env.DJZS_PAYER_KEY;
CLAUDE.md, line 65
npx tsx --env-file=.env.test server/engine-v2/calibration/run-live.ts
Show more
djzs-trust-mcp/harness/anchor-correction.ts, line 202
const anchorKey = process.env.DJZS_ANCHOR_KEY
djzs-trust-mcp/harness/buyer-probe.mjs, line 16
* - The wallet key comes ONLY from process.env.BUYER_PRIVATE_KEY.
djzs-trust-mcp/harness/buyer-probe.mjs, line 186
const raw = process.env.BUYER_PRIVATE_KEY;
djzs-trust-mcp/harness/buyer-probe.mjs, line 234
delete process.env.BUYER_PRIVATE_KEY;
scripts/deploy-proof-of-logic.cjs, line 15
if (!settlementWallet && process.env.SETTLEMENT_PRIVATE_KEY) {
scripts/deploy-proof-of-logic.cjs, line 17
const rawKey = process.env.SETTLEMENT_PRIVATE_KEY;
scripts/self-audit/run-self-audit.ts, line 15
* Run: export $(cat .env.test) && npx tsx scripts/self-audit/run-self-audit.ts
server/engine-v2/calibration/anchor-pm-block-008.ts, line 6
* npx tsx --env-file=.env.test server/engine-v2/calibration/anchor-pm-block-008.ts
server/engine-v2/calibration/anchor-pm-block-008.ts, line 19
console.error("NO ANTHROPIC_API_KEY (run with --env-file=.env.test)");
server/engine-v2/calibration/run-live.ts, line 9
* npx tsx --env-file=.env.test server/engine-v2/calibration/run-live.ts
server/engine-v2/calibration/run-live.ts, line 35
console.error("NO ANTHROPIC_API_KEY — run with --env-file=.env.test");
.dockerignore, line 4
.env
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Note
a file was over the read cap and was not fully read. the file cap was reached before every file was read.
OBFUSCATION_FILE_OVER_READ_CAP OBFUSCATION_FILE_CAP_REACHED
package-lock.json, line 1
{
djzs-subgraph/package-lock.json, line 1
{
djzs-trust-mcp/package-lock.json, line 1
{
Show more
packages/patronvault/lib/forge-std/src/safeconsole.sol, line 1
// SPDX-License-Identifier: MIT OR Apache-2.0
tests/q3/discovery/2026-09-10.json, line 1
{
tests/q3/discovery/2026-09-14.json, line 1
{
tests/q3/tape/claim-check.ts, line 1
/** Use 1 — claim vs tape. Prints a data-hygiene line for a card: what the narrative asserted, what the tape shows. Not a code; the taxonomy audits structure.
Licence
Note
no licence file found.
LICENCE_MISSING
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit dd625b1894bc. requests shell access. The manifest names this permission. can reach a host that is not written as a fixed address. can reach api.anthropic.com. The description does not name that host. reads a credential or environment file. a file was over the read cap and was not fully read. the file cap was reached before every file was read. no licence file found.
Date and source
Date checked:
github.com
Commit graded: dd625b1894bc1605695aa00d5b13864426b599aa
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.