agentrust-io/cmcp
cMCP: Confidential MCP Gateway. Hardware-attested policy enforcement for MCP tool calls.
Is agentrust-io/cmcp beginner-friendly?
In the last 30 days, agentrust-io/cmcp merged 20 of 30 pull requests from outside contributors, and its maintainers usually reply within 1 day. No beginner-friendly issue is open right now; the list below has the other issues we hold for it.
- Stars
- 33
- Forks
- 24
- Open beginner issues
- 0
- Indexed issues
- 14
- Avg merge
- 19h 50m
- Merged PRs (30d)
- 75
- Dominant language
- Python
- License
- MIT
- Last GitHub push
- Oct 6, 2026
- Latest indexed
- Oct 6, 2026
- Contributing guide
- Contributing guide
- Code of conduct
- Code of conduct
- Beginner labels
- help wanted
How to contribute to agentrust-io/cmcp
- Read the contributing guide first: it says how the maintainers want changes proposed, tested and reviewed.
- It ships a Dockerfile or Docker Compose file, so you can run it without installing its whole toolchain.
- Read its code of conduct: it covers issues and pull requests as well as chat.
- Follow the repository to hear when a new beginner-friendly issue opens, or look through the other issues below.
Issues somebody may already be working on are listed last. List everything by date
-
Difficulty 5/5 Over a week Newbie friendliness 25/100
agentrust-io/cmcp#736 · 6 comments ·
Maintainers usually reply within 1 day
-
feat(tee): seal the TRACE signing key to the gateway measurement (RFC P3)May be free again @Yatsuiii claimed this 46 days ago, and no pull request is open. Open
agentrust-io/cmcp#462 · 6 comments · 1 assignee ·
Maintainers usually reply within 1 day
-
[phase-2] Policy enforcement inside TEE — Cedar evaluation runs in the enclave, not at API boundaryMay be free again @kingztech2019 claimed this 46 days ago, and no pull request is open. Openattestation phase-2 security
agentrust-io/cmcp#124 · 10 comments · 1 assignee ·
Maintainers usually reply within 1 day
-
Follow-ups from #779: seal after bundle verification, owner-auth wording, config-digest changelogPossibly taken @rajnisht7 claimed this 3 days ago. Open
Difficulty 3/5 1-2 days Newbie friendliness 57/100
agentrust-io/cmcp#782 · 2 comments · 1 assignee ·
Maintainers usually reply within 1 day
-
3 of 6 InspectionResult values are declared but unreachablePossibly taken @dinakarjs claimed this 5 days ago. Open
Difficulty 3/5 Half a day Newbie friendliness 35/100
agentrust-io/cmcp#764 · 2 comments ·
Maintainers usually reply within 1 day
-
Session identity is minted fresh on every open, so a restarted or peer instance cannot resume a sessionPossibly taken @dinakarjs claimed this 3 days ago. Openhelp wanted
Difficulty 4/5 3-5 days Newbie friendliness 55/100
agentrust-io/cmcp#675 · 3 comments ·
Maintainers usually reply within 1 day
-
Define explicit authorization for releasing confidential data and derived outputsPossibly taken @rajnisht7 claimed this 3 days ago. Open
Difficulty 5/5 Over a week Newbie friendliness 25/100
agentrust-io/cmcp#660 · 7 comments · 1 assignee ·
Maintainers usually reply within 1 day
-
Bind MCP Tasks and authenticated callbacks into cMCP evidencePossibly taken @rajnisht7 claimed this 3 days ago. Open
Difficulty 5/5 Over a week Newbie friendliness 35/100
agentrust-io/cmcp#567 · 19 comments · 1 assignee ·
Maintainers usually reply within 1 day
-
Separate workload identity, represented user, and delegated authority claimsPossibly taken @rajnisht7 claimed this 3 days ago. Open
Difficulty 5/5 Over a week Newbie friendliness 35/100
agentrust-io/cmcp#568 · 6 comments · 1 assignee ·
Maintainers usually reply within 1 day
-
Bind progressive MCP discovery to versioned catalog checkpointsPossibly taken @rajnisht7 claimed this 3 days ago. Open
Difficulty 5/5 Over a week Newbie friendliness 35/100
agentrust-io/cmcp#566 · 14 comments · 1 assignee ·
Maintainers usually reply within 1 day