Tool of Truth
Provides MITM proxy integration for GitHub MCP server, intercepting and verifying tool calls, with trust scoring, cost tracking, and outcome verification.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@Tool of TruthCheck if the agent actually used GitHub before claiming it."
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Tool of Truth
Every tool call, proven.
Verification sentinel for AI agent tool usage. MITM proxy that intercepts all MCP tool calls, detects fabrication, tracks costs, verifies outcomes, and infers user satisfaction.
Features
Feature | Status | Description |
MITM Proxy | ✅ | Transparently intercepts all MCP tool calls |
Fabrication Detection | ✅ | 7-signal deep analysis: trace, doc-similarity, timing, placeholders, contradictions |
Trust Scoring | ✅ | Weighted 0-100 with fabrication cap |
Cost Tracking | ✅ | Per-call cost for 8 providers |
Token Counting | ✅ | Input/output tokens per call |
Outcome Verification | ✅ | Compares tool result against user's original prompt |
Skill Adherence | ✅ | Verifies workflow via manifests |
User Satisfaction | ✅ | Infers satisfaction from follow-up messages |
Receipts | ✅ | SHA-256 hashed, JSON + human-readable |
Local Storage | ✅ | JSONL daily files + indexed lookup |
Tool Transparency | ✅ | Shows what downstream tools actually do |
Related MCP server: openclaw-output-vetter-mcp
Quick Start
1. Install
npm install -g tooloftruth-mcp2. Connect (Option A: Direct)
// Your agent's MCP config
{
"tooloftruth": {
"command": "tooloftruth-mcp"
}
}3. Connect (Option B: Proxy — MITM mode)
// Your agent's MCP config — proxy a single downstream server
{
"firecrawl": { "command": "npx", "args": ["tooloftruth-mcp", "firecrawl"] }
}Or proxy every local MCP server via ~/.tooloftruth/proxy.json:
// ~/.tooloftruth/proxy.json
{
"servers": {
"firecrawl": { "command": "npx", "args": ["firecrawl-mcp"] },
"github": { "command": "npx", "args": ["@modelcontextprotocol/server-github"] }
}
}Skill Manifests (enforced)
Manifests in ~/.tooloftruth/manifests/<skill>.json gate tool calls:
{
"skill": "echo",
"version": "1.0.0",
"requires": {
"echo": { "tool": "echo", "must_be_called": true, "expected_args": { "message": "" } }
},
"outputRules": ["Output must contain \"Echo:\""],
"max_cost": 1.0
}Undeclared tools are blocked (BLOCKED_BY_MANIFEST); arg/pattern/cost/output-rule violations are recorded and downgrade the verdict.
4. Use
You: Did you actually use firecrawl?
Agent: [calls tooloftruth_verify]
Agent: VERIFIED — firecrawl was called at 10:30:02, trust score 98/100, cost $0.03
You: How much did I spend on tools today?
Agent: [calls tooloftruth_cost]
Agent: Total: $0.47 across 12 tool calls
You: Was that result what I asked for?
Agent: [calls tooloftruth_outcome]
Agent: ALIGNED — tool result matches your request
You: That's wrong, try again
Agent: [calls tooloftruth_satisfaction]
Agent: User appears dissatisfied — result may be wrongCLI
# Intercept and monitor non-MCP commands
tooloftruth -- gh api repos/user/repo
# One-shot status report (daemon health, receipts, cost, top tools)
tooloftruth statusDaemon
A launchd daemon watches .tooloftruth/receipts/, aggregates daily stats, and alerts on fabrications.
# Install the daemon (macOS)
launchctl load ~/Library/LaunchAgents/com.tooloftruth.daemon.plistStats are written to .tooloftruth/stats/YYYY-MM-DD.json.
Truth Scan
tooloftruth_truth_scan does real web verification of claims: Bing search (curl) → crawl4ai fetch → evidence extraction → verdict.
Sensitive-Data Detection
The daemon scans every new message and tool call for leaks, writing alerts with exact proof:
Secrets: 24 gitleaks-style rules + entropy — AWS keys, GitHub/OpenAI/Google/Anthropic tokens, JWTs, private keys, DB connection strings, generic API keys, passwords
PII: email, phone, SSN, credit card (Luhn-validated), IP, IBAN
Prompt injection: ignore-previous-instructions, system-prompt reveal, jailbreak (DAN), XML tag injection
Dangerous commands:
rm -rf /,curl | sh,ddto disk, base64-decode-to-shell, etc.
Alerts land in ~/.tooloftruth/alerts/ with redacted match, source, confidence, and surrounding context.
Deep scans: tooloftruth_gitleaks <repo> runs gitleaks (200+ rules) over a repo's git history with exact file:line proof.
Behavior Ledger
The daemon tracks per-session model, message/tool-call counts, error rate, token usage, and cost → ~/.tooloftruth/ledger/. Query via tooloftruth_ledger.
MCP Tools
Tool | Description |
| Verify a specific tool was used |
| Pre-flight: is tool installed/configured? |
| Generate/view verification receipt |
| Cost breakdown by tool |
| Search historical receipts |
| Full session truth report |
| Infer user satisfaction from message |
| Verify result matches user prompt |
| Cross-reference agent claims against actual tool calls |
| View conversation log |
| Web research + fact-check a claim |
| List sensitive-data alerts (PII/secrets/injection/commands) |
| Deep-scan a git repo for secrets |
| Per-session behavior (model, errors, tokens, cost) |
How the MITM Proxy Works
Agent ←→ Tool of Truth ←→ MCP Server (downstream)
↓
Records everything
Runs deep fabrication checks
Verifies outcome alignment
Infers satisfaction
Generates receipts
Returns result unchangedStorage
All data stays in your machine's home directory:
~/.tooloftruth/
├── config.json ← settings
├── index.json ← fast lookup index
├── proxy.json ← downstream server config
├── receipts/
│ ├── 2026-08-17.jsonl ← today's calls
│ └── ...
├── conversations/
│ └── 2026-08-17.jsonl ← claim/action conversations
└── stats/ ← daemon aggregations
├── 2026-08-17.json
└── ...
## Skill Manifests
Skills can attach verification manifests:
```json
{
"skill": "last-30-days",
"version": "2.1.0",
"requires": {
"github_mcp": {
"tool": "get_repo_stats",
"mustBeCalled": true
}
}
}Development
git clone https://github.com/adigoel07/tooloftruth.git
cd tooloftruth
pnpm install
pnpm build
npx vitest runLicense
MIT — use it, fork it, build on it.
Author
Built by adigoel07.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
No tool schema history has been recorded yet.
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
MCP server for AI agents to plan, verify, and deploy Cloudflare-native apps.
MCP server for secureFlows: token-free URL builders and integration-linting tools for AI agents.
A paid remote MCP for OpenAI Codex agent coordination MCP, built to return verdicts, receipts, usage
One MCP tool for verified AI-agent outcomes with success-only charging.
Related MCP Servers
AlicenseNot gradedqualityAmaintenanceOpen-source MCP proxy that enforces security policies, content scanning, and audit logging between AI agents and tool servers25AGPL 3.0- AlicenseAqualityBmaintenanceMCP server for verifying AI agent claims vs reality — single-transcript inline grounding-check that flags when an agent's response states facts not in the input context, when its code silently swallows exceptions and substitutes mock data, or when its multi-turn transcript contains contradictions or unverified completion claims. Sub-second, local, free, no API calls.41MIT
- AlicenseNot gradedqualityDmaintenanceEnables trust, reputation, and economic accountability for MCP by proxying between clients and servers, enriching every tool invocation with trust evaluation, KYA tiers, spending limits, and delegation chains.MIT
- AlicenseNot gradedqualityAmaintenanceAn MCP server that gives AI agents observability over their own tool calls, enabling auditing, cost tracking, latency analysis, and alerting.MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/adigoel07/tooloftruth'
If you have feedback or need assistance with the MCP directory API, please join our Discord server