MCP Runtime Policy Governance

import { defineMcpPolicy } from "@agenttrust/sdk";

export const fileServerPolicy = defineMcpPolicy({
  server: "filesystem-mcp-server",
  tools: {
    "read_file":   { trustLevel: "standard",  threshold: 0.75 },
    "list_dir":    { trustLevel: "standard",  threshold: 0.75 },
    "write_file":  { trustLevel: "sensitive", threshold: 0.90 },
    "delete_file": { trustLevel: "critical",  blocked: true },
  },
  // Require approval for any write to paths matching /prod/*
  parameterRules: [
    {
      tool: "write_file",
      condition: (params) => params.path?.startsWith("/prod/"),
      effect: "require_approval",
    },
  ],
});

import { Client } from "@modelcontextprotocol/sdk/client";
import { AgentTrustMcpAdapter } from "@agenttrust/sdk";
import { fileServerPolicy } from "./policy";

// Wrap the MCP client — no server changes required
const mcpClient = new Client({ name: "my-agent", version: "1.0.0" });
const governedClient = new AgentTrustMcpAdapter(mcpClient, {
  policy: fileServerPolicy,
  agentId: "research-agent-v1",
});

// Connect as normal
await governedClient.connect(transport);

// All tool calls through governedClient are policy-evaluated
const result = await governedClient.callTool({
  name:      "write_file",
  arguments: { path: "/reports/summary.md", content: "..." },
});
// If score < threshold → escalate or block (per policy)
// Otherwise → execute and record in Trust Audit

import { TrustAudit } from "@agenttrust/sdk";

const audit = new TrustAudit();

// All governed MCP calls in the last 24 hours
const records = await audit.query({
  source:     "mcp",
  agentId:    "research-agent-v1",
  from:       new Date(Date.now() - 86_400_000).toISOString(),
});

// Each record includes:
// { server, tool, params, score, signals, route, agentId, timestamp }
// Filter for escalated or blocked calls
const flagged = records.filter(r => r.route !== "autonomous");