What is Trust Gate MCP?
Trust Gate MCP is the first production MCP server implementing NIST FIPS 204 post-quantum receipts. It policy-gates every AI agent tool call and produces hybrid Ed25519 + ML-DSA-65 signed receipts, making each decision provable offline, forever. It is designed for AI agents that require auditable, quantum-resistant proof of their actions.
How to use Trust Gate MCP?
Add to Claude Desktop via a JSON configuration entry with command: "uvx" and args: ["trust-gate-mcp"], set the environment variable TRUST_GATE_API_KEY. For Claude Code, run claude mcp add trust-gate -- uvx trust-gate-mcp. Alternatively, install with pip install trust-gate-mcp and run with the API key set. The server exposes four tools: gate_decision, verify_receipt, check_policy, and health.
Key features of Trust Gate MCP
- Hybrid Ed25519 + ML-DSA-65 (NIST FIPS 204) signing
- Policy-gated AI agent decisions with risk scores
- Offline post-quantum receipt verification
- Three-layer security: sanitization, policy, fail-closed
- Fail-closed guarantee: outage makes system more conservative
- 47 passing unit tests, 51 OWASP ASI checks passed
Use cases of Trust Gate MCP
- Compliance: meeting EU AI Act Article 50 transparency obligations
- Quantum-proof auditing: retain verifiable receipts beyond the quantum computing era
- Security: prevent tool poisoning, injection, and exfiltration attacks
- Deployment guard: gate code deploys, data writes, or user-facing actions
评论