Trust Gate MCP server
online · 100% uptimeio.github.CWNApps/trust-gate-mcp·v0.2.0Post-quantum, tamper-evident receipts for agent actions. Ed25519 + ML-DSA-65, offline verify.
0 stars
Reviews
Write oneNobody has reviewed Trust Gate yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Trust Gate tools (4)
write = sends, deletes, buys or postsaudit_my_agent_inventoryFreeRank a CALLER-PROVIDED list of MCP tools by worst-regret if they act, with a signed receipt. Cannot auto-discover the inventory -- MCP does not allow that; the caller must pass it in.
mint_action_receiptFreeMint a post-quantum receipt for an arbitrary consequential agent action.
mint_receipt_for_record_changeFreeMint a post-quantum receipt for one CRM record change. Old/new values are carried as SHA-256 hashes. Works with any CRM (Relaticle, hosted CRMs, custom).
verify_receiptFreeVerify a Trust Gate receipt from the certificate alone (offline). require_pq=True (default via OAO_REQUIRE_PQ) FAILS if the ML-DSA-65 or SLH-DSA legs are missing -- defends against signature-stripping downgrade attacks.
Public scan report
scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it
- –Code scanremote-only server, no package to scann/a
- Live reliabilityremote reachable in 392ms20/20
- Tool poisoning4 tool descriptions checked15/15
- Auth qualityopen endpoint, read-only tools10/15
- Maintenancelast push 59 days ago12/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Trust Gate compares
Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 87/100
- higher than 78% of 4,460 AI and agents servers
- Tools
- 4
- the typical AI and agents server has 6
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- Uptime
- 100%
- of our recent checks; the typical remote AI and agents server answers 100%
- Response time
- 335 ms
- faster than 42% of 2,331 AI and agents servers
What its tools let an agent do: 4 read
Install Trust Gate in Claude Code, Cursor or VS Code
claude mcp add --transport http trust-gate-mcp https://trust-gate-mcp.onrender.com/mcp
What the publisher says
From the Trust Gate repository's README, as published. We do not edit it. Read it on GitHub
Trust Gate MCP
Post-quantum, tamper-evident receipts for consequential agent actions, as an MCP server.
Seven tools, one shared signing primitive: the open-source OpenAgentOntology mint_receipt.
What actually gets signed depends on what you install -- OAO detects its backend at import time, so this is worth stating plainly rather than advertising the best case:
PQ-required verify (the default) demands at least one verified post-quantum leg, so the dual-leg default is a real post-quantum posture, not a downgrade -- but only the [slh] install gives you the hash-based third leg.
Quantum Hardening (pol.must_do.150 reference implementation)
- H1 key persistence + bootstrap with FAIL-CLOSED kid-drift check
- H2 per-IP token-bucket rate limit (DoS-hardened: FIFO eviction + body cap)
- H3 PQ-required verify (defeats signature-stripping downgrade attacks)
- H4 128-bit kid on every minted receipt (offline same-notary check)
- Optional bearer-auth toggle + narrowed CORS via TRUSTGATEBEARERTOKEN + TRUSTGATEALLOWEDORIGINS
- 33/33 tests including adversarial PQ-strip + IP-rotation attack simulations
See PUBLISH.md for the full hardening status table.
Install (stdio)
pip install trust-gate-mcp
trust-gate-mcpAdd [slh] for the hash-based third leg. From a checkout, pip install -e ".[dev]" then python -m trustgatemcp.
Container deploy (Smithery / any container host)
docker build -t trust-gate-mcp .
docker run -p 8081:8081 -v trust-gate-data:/data/oao trust-gate-mcpThe volume mount on /data/oao is required for production -- without it the signing key rotates per restart and breaks long-running verification chains. The persistent key_metadata.json holds the notary's kid; the bootstrap step refuses to start if it drifts.
License
Apache-2.0. Built on the open-source OpenAgentOntology primitive.
Nothing above is checked by us. What we check is on the safety report.
Trust Gate: common questions
- Is Trust Gate MCP server safe?
- Yes, by our scan: it is graded A (87/100). Read the Trust Gate safety report
- How do I install Trust Gate?
- It runs remotely at trust-gate-mcp.onrender.com. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does Trust Gate need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Trust Gate maintained?
- The last commit was 98 days ago (2026-07-29). The latest release is v0.2.0.
- Is Trust Gate up?
- 100% of our last 28 checks got an answer. We check remote servers about four times a day.
- What can I use instead of Trust Gate?
- Servers from other publishers that do the same job: Emilia Protocol MCP server, Commonly MCP server and Decionis MCP server.
- How does Trust Gate compare with other AI and agents MCP servers?
- safety score 87/100 (higher than 78% of 4,460 AI and agents servers); tools 4 (the typical AI and agents server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Trust Gate
Same job from other publishers: the closest match first, then the best rated.
- Emilia ProtocolExact-action approval for consequential agent actions: request, track, and verify signed receipts.not reviewedEstablishedB
- CommonlyRead Commonly pods and post as a Commonly agent you create, with a token from your Commonly account.not reviewedEstablishedA
- not reviewedEstablishedA
- Agent-Native ChatMinimal chat-first app with durable threads, actions, and the app-agent loopnot reviewedEstablishedA
- Watch SkillWatch video and live sessions, keep timestamped evidence, and verify an agent's own work.not reviewedEstablishedB
