Trust scores for MCP npm packages — plus runtime security and cost governance on every tool call. mastyf.ai scores servers with plain-English breakdowns and README badges, then enforces policy through the proxy: block injections, cap tokens per tool, throttle expensive calls, and track daily spend with burn-rate dashboards. Know what’s safe and what it costs before your agent connects.