Trust Gate Mcp

What is Trust Gate Mcp?

Trust Gate Mcp is an MCP server that provides post-quantum, tamper-evident receipts for consequential agent actions. It integrates with the open-source OpenAgentOntology signing primitive and is designed for agents that need auditable, cryptographically verifiable trails.

How to use Trust Gate Mcp?

Install the package and run the server locally with pip install mcp "openagentontology[pq]" then python server.py. For containerized deployment, build the Docker image and run it with a volume mount on /data/oao for key persistence: docker build -t trust-gate-mcp . and docker run -p 8081:8081 -v trust-gate-data:/data/oao trust-gate-mcp.

Key features of Trust Gate Mcp

• Four tools: mint_receipt_for_record_change, audit_my_agent_inventory, mint_action_receipt, verify_receipt
• Post-quantum signing using Ed25519 + ML-DSA-65 + SLH-DSA
• Offline, no‑database verification via verify_receipt
• Read‑only audit tool that ranks tools by worst‑regret
• Quantum hardening including PQ‑required verify and 128‑bit kid
• Optional bearer‑auth and CORS via environment variables

Use cases of Trust Gate Mcp

• Minting post‑quantum receipts for CRM record changes
• Auditing an agent’s inventory of MCP tools for regret ranking
• Minting receipts for any consequential agent action
• Verifying receipts offline without a database

FAQ from Trust Gate Mcp

What is the signing primitive used?

The OpenAgentOntology mint_receipt primitive: Ed25519 + ML‑DSA‑65 + SLH‑DSA.

How do I run Trust Gate Mcp locally?

Install the package with pip install mcp "openagentontology[pq]" and then run python server.py.

What is required for production deployment?

A volume mount on /data/oao is required for persistent signing keys; without it the key rotates per restart and breaks long‑running verification chains.

Does Trust Gate Mcp auto‑discover other servers?

No – the MCP protocol does not allow auto‑discovery of other servers.

Is verification possible offline?

Yes – verify_receipt works offline from the certificate alone, no database required, and defaults to PQ‑required mode.