MCP.so
ログイン

Trust Gate MCP Server

@CWNApps

基本情報

カテゴリ

その他

ライセンス

NOASSERTION

トランスポート

stdio

作者

CWNApps

投稿者

CWNApps

Trust Gate MCP Server について

Policy-gated AI decisions with Ed25519 cryptographic receipts. No receipt, no trust.

Trust Gate MCP Server の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "trust-gate": {
      "url": "https://trust-gate-mcp.onrender.com/mcp"
    }
  }
}

Trust Gate MCP Server のツール

4

Mint a post-quantum receipt for one CRM record change. Old/new values are carried as SHA-256 hashes. Works with any CRM (Relaticle, hosted CRMs, custom).

Rank a CALLER-PROVIDED list of MCP tools by worst-regret if they act, with a signed receipt. Cannot auto-discover the inventory -- MCP does not allow that; the caller must pass it in.

Mint a post-quantum receipt for an arbitrary consequential agent action.

Verify a Trust Gate receipt from the certificate alone (offline). require_pq=True (default via OAO_REQUIRE_PQ) FAILS if the ML-DSA-65 or SLH-DSA legs are missing -- defends against signature-stripping downgrade attacks.

概要

What is Trust Gate Mcp?

Trust Gate Mcp is an MCP server that provides post-quantum, tamper-evident receipts for consequential agent actions. It integrates with the open-source OpenAgentOntology signing primitive and is designed for agents that need auditable, cryptographically verifiable trails.

How to use Trust Gate Mcp?

Install the package and run the server locally with pip install mcp "openagentontology[pq]" then python server.py. For containerized deployment, build the Docker image and run it with a volume mount on /data/oao for key persistence: docker build -t trust-gate-mcp . and docker run -p 8081:8081 -v trust-gate-data:/data/oao trust-gate-mcp.

Key features of Trust Gate Mcp

  • Four tools: mint_receipt_for_record_change, audit_my_agent_inventory, mint_action_receipt, verify_receipt
  • Post-quantum signing using Ed25519 + ML-DSA-65 + SLH-DSA
  • Offline, no‑database verification via verify_receipt
  • Read‑only audit tool that ranks tools by worst‑regret
  • Quantum hardening including PQ‑required verify and 128‑bit kid
  • Optional bearer‑auth and CORS via environment variables

Use cases of Trust Gate Mcp

  • Minting post‑quantum receipts for CRM record changes
  • Auditing an agent’s inventory of MCP tools for regret ranking
  • Minting receipts for any consequential agent action
  • Verifying receipts offline without a database

よくある質問

1

What is the signing primitive used?

The OpenAgentOntology `mint_receipt` primitive: Ed25519 + ML‑DSA‑65 + SLH‑DSA.

2

How do I run Trust Gate Mcp locally?

Install the package with `pip install mcp "openagentontology[pq]"` and then run `python server.py`.

3

What is required for production deployment?

A volume mount on `/data/oao` is required for persistent signing keys; without it the key rotates per restart and breaks long‑running verification chains.

4

Does Trust Gate Mcp auto‑discover other servers?

No – the MCP protocol does not allow auto‑discovery of other servers.

5

Is verification possible offline?

Yes – `verify_receipt` works offline from the certificate alone, no database required, and defaults to PQ‑required mode.

コメント

「その他」の他のコンテンツ