davidnichols-ops/trustcard

Cryptographic trust infrastructure for MCP servers — signed manifests, TOFU pinning, two-gate enforcement, and the "npm audit" scanner.

2 best points · 0 comments · 1 Hacker News post · 4 GitHub stars · View on GitHub

Hacker News discussions

• I scanned 10 MCP servers – here's what agents can't know before connecting (2 points, 0 comments, by davidnicholsops, 2026-07-15)