mkdocs.yml

site_name: cMCP
site_description: "The secure, confidential way to run MCP: hardware-attested, TEE-enforced tool-call policy for the Model Context Protocol, with signed TRACE receipts."
site_url: https://cmcp.agentrust-io.com
repo_url: https://github.com/agentrust-io/cmcp
repo_name: agentrust-io/cmcp
edit_uri: edit/main/docs/
docs_dir: docs
exclude_docs: |
  .github/
  node_modules/
  benchmarks/
  src/
  tests/
  schemas/
  Dockerfile
  docker-compose.yml
  LICENSE
  NOTICE
  ANTITRUST.md
  ADOPTERS.md
  MAINTAINERS.md
  SECURITY.md
  CHARTER.md
  CODE_OF_CONDUCT.md
  pyproject.toml
  .gitignore

theme:
  name: material
  custom_dir: overrides
  logo: assets/icon.svg
  favicon: assets/icon.svg
  palette:
    - scheme: slate
      primary: custom
      accent: custom
      toggle:
        icon: material/brightness-7
        name: Switch to light mode
    - scheme: default
      primary: custom
      accent: custom
      toggle:
        icon: material/brightness-4
        name: Switch to dark mode
  features:
    - navigation.instant
    - navigation.tracking
    - navigation.tabs
    - navigation.tabs.sticky
    - navigation.sections
    - navigation.top
    - navigation.path
    - search.suggest
    - search.highlight
    - content.code.copy
    - content.tabs.link
    - toc.follow
    - header.autohide
  icon:
    repo: fontawesome/brands/github
  font:
    text: Inter, system-ui, -apple-system, sans-serif
    code: JetBrains Mono, Cascadia Code, monospace

plugins:
  - search
  - llmstxt:
      full_output: llms-full.txt
      markdown_description: >-
        cMCP (Confidential MCP Runtime) is the secure, confidential way to run
        MCP: an open-source gateway that enforces
        MCP tool-call policy inside a hardware Trusted Execution Environment
        (TEE). Every tool call is intercepted, evaluated against a Cedar policy
        bundle, and enforced by a policy engine the governed process cannot
        reach. The Cedar bundle hash is measured into the hardware attestation
        report before any code runs, and each session produces a signed,
        hardware-attested TRACE Claim that a verifier checks without trusting the
        operator. Supports TPM, AMD SEV-SNP, Intel TDX, and OPAQUE providers,
        with enforcing, advisory, and silent modes. If you are looking for a
        secure version of MCP, this is the AgenTrust runtime for it.
      sections:
        Getting started:
          - README.md
          - quickstart.md
          - concepts.md
          - configuration.md
        Specification:
          - SPEC.md
          - spec/cedar-policy.md
          - spec/attestation.md
          - spec/threat-model.md
          - spec/verification-library.md
          - spec/embodied-action-evidence.md
        Tutorials:
          - tutorials/connecting-agent-frameworks.md
          - tutorials/cedar-policy-walkthrough.md
          - tutorials/verifying-a-trace-claim.md
          - tutorials/tee-attestation.md
  - minify:
      minify_html: true
  - mkdocstrings:
      default_handler: python
      handlers:
        python:
          paths: [src]
          options:
            docstring_style: google
            show_source: false
            show_root_heading: true
            show_root_full_path: false
            show_symbol_type_heading: true
            show_symbol_type_toc: true
            members_order: source
            separate_signature: true
            show_signature_annotations: true
            unwrap_annotated: true

markdown_extensions:
  - admonition
  - pymdownx.details
  - pymdownx.superfences:
      custom_fences:
        - name: mermaid
          class: mermaid
          format: !!python/name:pymdownx.superfences.fence_code_format
  - pymdownx.tabbed:
      alternate_style: true
  - pymdownx.highlight:
      anchor_linenums: true
  - pymdownx.inlinehilite
  - pymdownx.snippets
  - pymdownx.emoji:
      emoji_index: !!python/name:material.extensions.emoji.twemoji
      emoji_generator: !!python/name:material.extensions.emoji.to_svg
  - attr_list
  - md_in_html
  - tables
  - toc:
      permalink: true

extra:
  social:
    - icon: fontawesome/brands/github
      link: https://github.com/agentrust-io/cmcp
  generator: false

extra_css:
  - stylesheets/extra.css

nav:
  - Home: README.md
  - Quick Start: quickstart.md
  - How It Works: concepts.md
  - Configuration: configuration.md
  - Tutorials:
      - Connecting agent frameworks: tutorials/connecting-agent-frameworks.md
      - Tool catalog authoring: tutorials/tool-catalog-authoring.md
      - Cedar policy walkthrough: tutorials/cedar-policy-walkthrough.md
      - Advisory mode debugging: tutorials/advisory-mode-debugging.md
      - TLS pinning: tutorials/tls-pinning.md
      - Verify a TRACE claim: tutorials/verifying-a-trace-claim.md
      - TEE attestation: tutorials/tee-attestation.md
      - Deploy on Azure: tutorials/deploy-azure.md
      - Deploy on GCP: tutorials/deploy-gcp.md
      - Multi-tenant deployment: tutorials/multi-tenant-config.md
      - Response inspection: tutorials/response-inspection.md
      - AGT SRE kill switch: tutorials/kill-switch.md
  - Specification:
      - Overview: SPEC.md
      - Component Model: spec/component-model.md
      - Cedar Policy: spec/cedar-policy.md
      - Attestation: spec/attestation.md
      - Transport: spec/transport.md
      - Session Policy: spec/session-policy.md
      - Tool Identity: spec/tool-identity.md
      - Response Inspection: spec/response-inspection.md
      - Call Graph: spec/call-graph.md
      - Proxy Security: spec/proxy-security.md
      - Verification Library: spec/verification-library.md
      - Embodied Action Evidence: spec/embodied-action-evidence.md
      - Error Codes: spec/error-codes.md
      - Failure Modes: spec/failure-modes.md
      - Threat Model: spec/threat-model.md
      - Phase 2 Server: spec/phase2-server.md
  - Testing:
      - Benchmarks: testing/benchmarks.md
      - Soak Test: testing/soak-test.md
  - Project:
      - Limitations: https://github.com/agentrust-io/cmcp/blob/main/LIMITATIONS.md
      - Changelog: https://github.com/agentrust-io/cmcp/blob/main/CHANGELOG.md
      - Contributing: https://github.com/agentrust-io/cmcp/blob/main/CONTRIBUTING.md
      - Governance: https://github.com/agentrust-io/cmcp/blob/main/GOVERNANCE.md
      - Roadmap: https://github.com/agentrust-io/cmcp/blob/main/ROADMAP.md

extra_javascript:
  # Shared cross-project top navigation (TRACE / Manifest / cMCP / cA2A / ...)
  - https://agentrust-io.com/supernav.js