社区更新及贡献者亮点：LinkedIn上的AgenTrust。

在 TEE 内执行 MCP 工具策略，使其所管理的代理无法访问

快速入门 · 建筑 · 配置· CLI · 更新日志

开发者预览 - 于2026年6月23日机密计算峰会上发布。在1.0版本之前可能会有重大变更。请参见 STATUS.md，了解今天发布的内容与路线图上的具体内容。

cMCP（机密MCP运行时）是一个开源网关，会对AI代理发出的每一个工具调用与你编写的规则进行核对，并且可以在智能体无法篡改的封闭硬件上运行。 AI代理通过发送称为工具调用的工具（数据库、CRM、电子邮件、内部API）来使用工具，通常通过MCP（模型上下文协议）发送请求。cMCP位于这些调用的路径上，逐一与你的规则（用Cedar策略语言编写）进行检查，并阻止规则禁止的调用。它可以运行在TEE（可信执行环境：即使机器所有者也封锁程序内存的硬件），而它所管理的代理无法访问它。

cMCP: Confidential MCP Runtime

Community updates and contributor highlights: AgenTrust on LinkedIn.

Enforce MCP tool policy inside a TEE, where the agent it governs cannot reach it

Quick Start ·
Architecture ·
Configuration ·
CLI ·
Changelog

Developer Preview - launched at the Confidential Computing Summit, June 23 2026. May have breaking changes before v1.0. See STATUS.md for exactly what ships today versus what is on the roadmap.

cMCP (Confidential MCP Runtime) is an open-source gateway that checks every tool call an AI agent makes against rules you write, and can run on sealed-off hardware the agent cannot tamper with. AI agents use tools (databases, CRMs, email, internal APIs) by sending requests called tool calls, usually over MCP, the Model Context Protocol. cMCP sits in the path of those calls, checks each one against your rules (written in the Cedar policy language), and blocks the ones the rules forbid. It can run inside a TEE (trusted execution environment: hardware that keeps a program’s memory sealed off even from the machine’s owner), where the agent it governs cannot reach it. Each session ends with a signed receipt, a TRACE Claim, that anyone can check without trusting whoever ran the gateway. The receipt is backed by a hardware report when the gateway runs in a TEE, and is signed only (no hardware proof) in software mode. New to these terms? See the terms, in plain English.

TL;DR: Point your agent at the cMCP Gateway. It checks every tool call against your Cedar rules, blocks or redacts (blanks out) what the rules deny, and gives you a signed receipt that shows if anyone altered it. Run pip install cmcp-runtime and start in software mode on any computer; no special hardware required.