MCP.so
Sign In
T

Trust Gate MCP — First post-quantum MCP server. Policy-gated AI…

@Cyber-Warrior-Network

Repository

About Trust Gate MCP — First post-quantum MCP server. Policy-gated AI…

The first production MCP server with NIST FIPS 204 post-quantum receipts. Every AI agent tool call is policy-gated, hybrid-signed (Ed25519 + ML-DSA-65), and forensically provable — offline, forever. Fail-closed architecture: if the Trust Gate backend is unreachable, every decisio

#mcp#ai-safety#post-quantum#trust#cryptography#fips-204#eu-ai-act#agent-firewall#prompt-injection#ml-dsa

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "trust-gate": {
      "command": "uvx",
      "args": [
        "trust-gate-mcp"
      ],
      "env": {
        "TRUST_GATE_API_KEY": "your-api-key"
      }
    }
  }
}

Tools

No tools detected

Fetch the live tool list by running this server in a temporary sandbox using the button above.

Overview

What is Trust Gate MCP?

Trust Gate MCP is the first production MCP server implementing NIST FIPS 204 post-quantum receipts. It policy-gates every AI agent tool call and produces hybrid Ed25519 + ML-DSA-65 signed receipts, making each decision provable offline, forever. It is designed for AI agents that require auditable, quantum-resistant proof of their actions.

How to use Trust Gate MCP?

Add to Claude Desktop via a JSON configuration entry with command: "uvx" and args: ["trust-gate-mcp"], set the environment variable TRUST_GATE_API_KEY. For Claude Code, run claude mcp add trust-gate -- uvx trust-gate-mcp. Alternatively, install with pip install trust-gate-mcp and run with the API key set. The server exposes four tools: gate_decision, verify_receipt, check_policy, and health.

Key features of Trust Gate MCP

  • Hybrid Ed25519 + ML-DSA-65 (NIST FIPS 204) signing
  • Policy-gated AI agent decisions with risk scores
  • Offline post-quantum receipt verification
  • Three-layer security: sanitization, policy, fail-closed
  • Fail-closed guarantee: outage makes system more conservative
  • 47 passing unit tests, 51 OWASP ASI checks passed

Use cases of Trust Gate MCP

  • Compliance: meeting EU AI Act Article 50 transparency obligations
  • Quantum-proof auditing: retain verifiable receipts beyond the quantum computing era
  • Security: prevent tool poisoning, injection, and exfiltration attacks
  • Deployment guard: gate code deploys, data writes, or user-facing actions

FAQ from Trust Gate MCP

How does Trust Gate MCP achieve post-quantum security?

Every receipt is hybrid-signed: Ed25519 (classical) and ML-DSA-65 (NIST FIPS 204, security level 3) over the same evidence hash, simultaneously. Both signatures and the ML-DSA-65 public key are embedded in the receipt.

Can receipts be verified offline?

Yes. Provide the ml_dsa_signature and ml_dsa_public_key from the receipt to verify the ML-DSA-65 signature. No backend call or network access is required, and verification remains valid even against a quantum adversary.

What happens if the backend is offline or times out?

The system fails closed: it returns allow: false, risk_score: 1.0, and receipt: null. An outage makes the system more conservative,

Frequently asked questions

How does Trust Gate MCP achieve post-quantum security?

Every receipt is hybrid-signed: Ed25519 (classical) and ML-DSA-65 (NIST FIPS 204, security level 3) over the same evidence hash, simultaneously. Both signatures and the ML-DSA-65 public key are embedded in the receipt.

Can receipts be verified offline?

Yes. Provide the `ml_dsa_signature` and `ml_dsa_public_key` from the receipt to verify the ML-DSA-65 signature. No backend call or network access is required, and verification remains valid even against a quantum adversary.

What happens if the backend is offline or times out?

The system fails closed: it returns `allow: false`, `risk_score: 1.0`, and `receipt: null`. An outage makes the system more conservative,

Comments

Basic information

Category

AI & Agents

Transports

stdio

Author

Cyber-Warrior-Network

Submitted by

CWNApps

More AI & Agents MCP servers

PDI Bridge for Claude

jxrlabs

Connect Claude Desktop to your ServiceNow PDI. Query records, inspect Business Rules, review ACLs, and troubleshoot against your live instance.

Agentery

ntlgnc

Free MCP for live and historical pricing for 13,000+ agents and MCPs. Never knowingly pay too much... or charge too little. Know the going rate. https://agentery.com.

bsv.cx

Andy Rowe

Timestamp and verify evidence on-chain. Let your agent prove what it saw and when. bsv.cx gives an AI agent verifiable memory. Timestamp a hash of any output, archive a web page as it looked, or fetch a URL with a recei

Transform MCP

Unstructured

The Unstructured Transform MCP Server connects your ADK agent to Unstructured, a document processing platform that turns raw files into structured, AI-ready data. This integration gives your agent the ability to parse PD

🛡️ A.I.G（AI-Infra-Guard）

Tencent

A full-stack AI Red Teaming platform securing AI ecosystems via OpenClaw Security Scan, Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.

4.1K