agentrust-io

agentrust-io/cmcp

cMCP — Confidential MCP Gateway. Hardware-attested policy enforcement for MCP tool calls.

10 good first / help-wanted issues · Python · last activity Jul 24, 2026

5 stars 6 forks 5 watchers Python MIT License
View on GitHub
10 Open Issues Need Help Last updated: Jul 24, 2026

Open Issues Need Help

View All on GitHub
Session identity is minted fresh on every open, so a restarted or peer instance cannot resume a session 19 days ago
help wanted
agentrust-io/cmcp
5

cMCP — Confidential MCP Gateway. Hardware-attested policy enforcement for MCP tool calls.

Python
Cedar policy walkthrough: every example policy denies every call about 1 month ago
good first issue
agentrust-io/cmcp
5

cMCP — Confidential MCP Gateway. Hardware-attested policy enforcement for MCP tool calls.

Python
Durable stores are never closed on shutdown about 1 month ago
good first issue
agentrust-io/cmcp
5

cMCP — Confidential MCP Gateway. Hardware-attested policy enforcement for MCP tool calls.

Python
Starter Cedar policy templates with tests about 1 month ago
help wanted
agentrust-io/cmcp
5

cMCP — Confidential MCP Gateway. Hardware-attested policy enforcement for MCP tool calls.

Python
check_docs_quickstart.py hides the real failure when the runtime exits early about 1 month ago
good first issue
agentrust-io/cmcp
5

cMCP — Confidential MCP Gateway. Hardware-attested policy enforcement for MCP tool calls.

Python
Quickstart still pins cmcp-runtime 0.5.0; the current release is 0.6.0 about 1 month ago
good first issue
agentrust-io/cmcp
5

cMCP — Confidential MCP Gateway. Hardware-attested policy enforcement for MCP tool calls.

Python
security: verify attestation report signatures (VCEK / DCAP / EK) 3 months ago
help wanted fellowship cosai-ws4
agentrust-io/cmcp
5

cMCP — Confidential MCP Gateway. Hardware-attested policy enforcement for MCP tool calls.

Python
bug(tee): tpm2_pcrread hex parsing uses lstrip and corrupts PCR values with leading zeros 3 months ago
bug good first issue attestation track:tee
agentrust-io/cmcp
5

cMCP — Confidential MCP Gateway. Hardware-attested policy enforcement for MCP tool calls.

Python
harden: fail closed at runtime when per-session attested report cannot be produced 3 months ago
help wanted fellowship
agentrust-io/cmcp
5

cMCP — Confidential MCP Gateway. Hardware-attested policy enforcement for MCP tool calls.

Python
[security] Restrict tokenless dev mode to loopback by default 3 months ago
good first issue needs-review:HIGH fellowship
agentrust-io/cmcp
5

cMCP — Confidential MCP Gateway. Hardware-attested policy enforcement for MCP tool calls.

Python