As more agents go into production, agent reliability has surfaced as a serious issue that requires immediate attention. Here’s your “easy button” solution. Trustabl is a static analyzer that scans agent repos built on Claude, OpenAI, Google ADK, and MCP and finds reliability and safety issues before they reach production. Missing timeouts. Unguarded shell tools. SSRF exposure. Missing observability hooks. Agents with no guardrails wired. And more…
The part that surprised people when we shipped it: fixing those issues is now almost entirely automatic.
→ In your editor (Cursor / Claude Code): Connect the Trustabl MCP server. Your AI coding assistant can query findings directly and implement fixes inline, no context switching, no separate tool.
→ In CI: Add two lines of YAML. The GitHub Action scans every PR, posts a readiness score as a sticky comment, and surfaces findings as inline annotations on the changed lines. Add your Anthropic API key and set auto-enrich: true. High-confidence fixes are applied and a fix PR is opened for your review. You accept what looks right.
→ For DevSecOps: Findings upload to GitHub Code Scanning via SARIF. They appear in the Security tab alongside your other supply chain signals. Same dashboard, same workflows, same alert routing. No new tooling to learn.
One scan. Three surfaces. The issues get found, explained, and fixed, mostly without you having to touch them.
We're open source (Apache-2.0) and free to start. If you're shipping agents, we'd love to know what you find.
