MCP.so
登录

Trust Gate MCP Server

@CWNApps

基本信息

分类

其他

许可证

NOASSERTION

传输方式

stdio

作者

CWNApps

提交者

CWNApps

关于 Trust Gate MCP Server

Policy-gated AI decisions with Ed25519 cryptographic receipts. No receipt, no trust.

Trust Gate MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "trust-gate": {
      "url": "https://trust-gate-mcp.onrender.com/mcp"
    }
  }
}

Trust Gate MCP Server 工具

4

Mint a post-quantum receipt for one CRM record change. Old/new values are carried as SHA-256 hashes. Works with any CRM (Relaticle, hosted CRMs, custom).

Rank a CALLER-PROVIDED list of MCP tools by worst-regret if they act, with a signed receipt. Cannot auto-discover the inventory -- MCP does not allow that; the caller must pass it in.

Mint a post-quantum receipt for an arbitrary consequential agent action.

Verify a Trust Gate receipt from the certificate alone (offline). require_pq=True (default via OAO_REQUIRE_PQ) FAILS if the ML-DSA-65 or SLH-DSA legs are missing -- defends against signature-stripping downgrade attacks.

概览

What is Trust Gate Mcp?

Trust Gate Mcp is an MCP server that provides post-quantum, tamper-evident receipts for consequential agent actions. It integrates with the open-source OpenAgentOntology signing primitive and is designed for agents that need auditable, cryptographically verifiable trails.

How to use Trust Gate Mcp?

Install the package and run the server locally with pip install mcp "openagentontology[pq]" then python server.py. For containerized deployment, build the Docker image and run it with a volume mount on /data/oao for key persistence: docker build -t trust-gate-mcp . and docker run -p 8081:8081 -v trust-gate-data:/data/oao trust-gate-mcp.

Key features of Trust Gate Mcp

  • Four tools: mint_receipt_for_record_change, audit_my_agent_inventory, mint_action_receipt, verify_receipt
  • Post-quantum signing using Ed25519 + ML-DSA-65 + SLH-DSA
  • Offline, no‑database verification via verify_receipt
  • Read‑only audit tool that ranks tools by worst‑regret
  • Quantum hardening including PQ‑required verify and 128‑bit kid
  • Optional bearer‑auth and CORS via environment variables

Use cases of Trust Gate Mcp

  • Minting post‑quantum receipts for CRM record changes
  • Auditing an agent’s inventory of MCP tools for regret ranking
  • Minting receipts for any consequential agent action
  • Verifying receipts offline without a database

常见问题

1

What is the signing primitive used?

The OpenAgentOntology `mint_receipt` primitive: Ed25519 + ML‑DSA‑65 + SLH‑DSA.

2

How do I run Trust Gate Mcp locally?

Install the package with `pip install mcp "openagentontology[pq]"` and then run `python server.py`.

3

What is required for production deployment?

A volume mount on `/data/oao` is required for persistent signing keys; without it the key rotates per restart and breaks long‑running verification chains.

4

Does Trust Gate Mcp auto‑discover other servers?

No – the MCP protocol does not allow auto‑discovery of other servers.

5

Is verification possible offline?

Yes – `verify_receipt` works offline from the certificate alone, no database required, and defaults to PQ‑required mode.

评论

其他 分类下的更多 MCP 服务器