Is assay-truth-graph safe to install?

SaferSkills independently audited assay-truth-graph (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

README.md · 1 file

README.md2.4 KB · Markdown

Assay Truth Graph MCP

Assay Truth Graph MCP is a remote MCP server for GTM teams that need AI agents to work from governed, cited company truth.

Assay turns positioning, proof points, brand voice, personas, collateral context, and validation rules into a governed Truth Graph. The remote MCP server lets Claude, ChatGPT, Cursor, Claude Code, Codex, and other MCP clients use that context without copying company facts into each agent.

Connect

Use the remote streamable HTTP endpoint:

https://app.assay.wiki/api/mcp/v2/mcp

Claude Code:

claude mcp add --transport http assay-truth-graph https://app.assay.wiki/api/mcp/v2/mcp

Generic MCP config:

{
  "mcpServers": {
    "assay-truth-graph": {
      "type": "http",
      "url": "https://app.assay.wiki/api/mcp/v2/mcp"
    }
  }
}

OAuth opens in the browser on first use for interactive clients. Headless agents can authenticate with an org API key from Assay Settings.

Replit one-click install:

Codex repo marketplace:

codex plugin marketplace add Assay-Org/assay-truth-graph-mcp

Then install the Assay Truth Graph plugin from Codex Plugins.

What Agents Can Do

Get verified GTM context for customer-facing drafts.
Search the Truth Graph with provenance and caller-aware context shaping.
Validate draft content against approved facts and guardrails before it ships.
Create or update Truth Graph records through dry-run and human-approved

plan-token workflows.

Generate grounded collateral drafts in quarantine, with preview and export

gates.

Directory Copy

Short description:

Remote MCP server that grounds GTM agents in governed, cited company truth.

Tags:

MCP, Model Context Protocol, remote MCP server, GTM, go-to-market, positioning,
sales enablement, content governance, AI governance, compliance, truth graph,
provenance, Claude, ChatGPT, Cursor

assay-truth-graph— plugin

Is assay-truth-graph safe to install?

Assay Truth Graph MCP

Connect

What Agents Can Do

Links

Directory Copy

Audit the pieces. Scan the whole. Decide.