Cryptographic trust infrastructure for MCP servers — signed manifests, TOFU pinning, two-gate enforcement, and the "npm audit" scanner.
Latest release v3.2.0 — mcp-trustcard 3.2.0 · 16 Oct 2026
3 files for Claude Code, Codex and OpenCode: testing-trustcard-behavior, testing-trustcard-rfc, trustcard AGENTS.md — 2,467 tokens loaded in every session.
AGENTS.md A 2,467 tok .devin/skills/testing-trustcard-behavior/SKILL.md A 34 tok .devin/skills/testing-trustcard-rfc/SKILL.md A 25 tok These files are davidnichols-ops/trustcard's own configuration — they tell Claude Code, Codex and OpenCode how to work on this repository, so they are not mods to install elsewhere. Copy one as a starting point and replace the parts that are about this project.