Skip to content

Conversation

@dtang19
Copy link

@dtang19 dtang19 commented Dec 23, 2025

Motivation and Context

MCPTrust is a deny-by-default security layer for MCP servers. It provides lockfiles, drift detection, artifact integrity/provenance verification, and a runtime enforcement proxy.

How Has This Been Tested?

  • Go unit tests (go test ./...)
  • 17-phase adversarial test suite
  • Tested with Claude Desktop, Claude Code, GitHub Actions, Docker

Breaking Changes

N/A — new community project addition.

Types of changes

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to change)
  • [ x ] Documentation update

Checklist

  • [ x ] I have read the MCP Documentation
  • [ x ] My code follows the repository's style guidelines
  • [ x ] New and existing tests pass locally
  • [ x ] I have added appropriate error handling
  • [ x ] I have added or updated documentation as needed

Additional context

Adds MCPTrust as a community project for securing MCP servers in CI and at runtime (lockfiles, drift detection, artifact integrity/provenance verification, deny-by-default proxy).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant