Trust Gate MCP — First post-quantum MCP server. Policy-gated AI agent decisions with hybrid Ed25519 + ML-DSA-65 (NIST FIPS 204) cryptographic receipts. No Receipt. No Trust.

by Cyber-Warrior-Network

322 downloads
Not rated
GitHub

About

The first production MCP server with NIST FIPS 204 post-quantum receipts. Every AI agent tool call is policy-gated, hybrid-signed (Ed25519 + ML-DSA-65), and forensically provable — offline, forever. Fail-closed architecture: if the Trust Gate backend is unreachable, every decisio

Details

Author
Cyber-Warrior-Network
Downloads
322
Categories
AI

- Hybrid Ed25519 + ML-DSA-65 (NIST FIPS 204) signing
- Policy-gated AI agent decisions with risk scores
- Offline post-quantum receipt verification
- Three-layer security: sanitization, policy, fail-closed
- Fail-closed guarantee: outage makes system more conservative
- 47 passing unit tests, 51 OWASP ASI checks passed

Setting up with Highlight

This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:

  1. Download and install Highlight from highlightai.com/download
  2. Navigate to the plugins tab and select "Add Custom Plugin"
  3. Configure the plugin with the settings below
    Plugin Name Trust Gate MCP — First post-quantum MCP server. Policy-gated AI agent decisions with hybrid Ed25519 + ML-DSA-65 (NIST FIPS 204) cryptographic receipts. No Receipt. No Trust.
    Command (node, npx, python, etc.)

    Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.

  4. Enable "Start Automatically" if you want the plugin to start when Highlight launches

From the repository

Add to Claude Desktop via a JSON configuration entry with command: "uvx" and args: ["trust-gate-mcp"], set the environment variable TRUST_GATE_API_KEY. For Claude Code, run claude mcp add trust-gate -- uvx trust-gate-mcp. Alternatively, install with pip install trust-gate-mcp and run with the API key set. The server exposes four tools: gate_decision, verify_receipt, check_policy, and health.

Claude Desktop / Cursor

Paste into your MCP client config file to install this server.

{
    "mcpServers": {
        "trust gate mcp \u2014 first post-quantum mcp server. policy-gated ai agent decisions with hybrid ed25519 + ml-dsa-65 (nist fips 204) cryptographic receipts. no receipt. no trust.": {
            "trust-gate": {
                "command": "uvx",
                "args": [
                    "trust-gate-mcp"
                ],
                "env": {
                    "TRUST_GATE_API_KEY": "your-api-key"
                }
            }
        }
    }
}

McpServers

{
    "trust-gate": {
        "command": "uvx",
        "args": [
            "trust-gate-mcp"
        ],
        "env": {
            "TRUST_GATE_API_KEY": "your-api-key"
        }
    }
}

No Receipt. No Trust.

Python 3.10+
License: Apache 2.0
Tests
OWASP ASI
Stress Test
Bandit
MCP Compatible
NIST FIPS 204: ML-DSA-65
EU AI Act Article 50: ready
CNSA 2.0: ready
CVE-2026-25253: protected

Every MCP tool call your AI agent makes is now policy-gated, hybrid-signed, and forensically provable — offline, forever.<br>
If a tool was poisoned, rug-pulled, hijacked, or quantum-broken in 2033 — you have cryptographic proof today.

</div>

---

No reviews yet — be the first

Sign in to leave a review

Use Google, GitHub, or an email account so ratings stay tied to real people.

Email sign in

No reviews posted yet.