End-to-end integration examples showing cMCP, Agent Manifest, and TRACE working together across deployment scenarios. Each example is self-contained and runnable on a fresh cloud VM. Running them shows how the projects compose: cMCP enforces policy at the tool call boundary, Agent Manifest carries the identity and capability declaration, cA2A attenuates authority at the agent-to-agent boundary, and TRACE emits a signed Trust Record for every tool invocation so you can see what the full audit trail looks like in practice.
| Example | What it shows | Platform | Compliance |
|---|---|---|---|
ca2a-delegation/ |
Agent-to-agent delegation with cA2A: attenuated credit-workflow chain, offline verification, and a rejected scope escalation | Software-only (offline) | Separation of duties, least authority |
embodied-action-receipts/ |
Fixture-style offline verification for embodied action receipts: accepted chain, missing receipt, signature mismatch and valid controller rejection | Software-only fixtures | TRACE action-receipt evidence boundary |
financial-services/ |
Corporate credit risk agent: six-step assessment with CDD, exposure and IFRS 9 guardrails on the write | SEV-SNP / TDX | EU AI Act Art. 9/12, CRR Art. 395, EBA/GL/2020/06, EU AML, DORA Art. 9 |
healthcare/ |
Clinical agent on a coherent ICD-10 patient: drug-interaction check feeds EU AI Act Art. 14 HITL and contraindication denies | SEV-SNP / TDX | EU AI Act Art. 14, HIPAA |
industrial-embodied-ai/ |
Material-movement agent with cMCP authorization, an independent safety-controller boundary and offline-verifiable closed-session evidence | TEE / software-only development mode | OT security and industrial robot safety references |
multi-tenant-saas/ |
HR SaaS with an EU tenant (enforcing GDPR residency/Art. 9) and a US tenant (advisory) on one catalog | TDX | GDPR Art. 6/9/44, customer DPA |
startup-tpm/ |
15-minute quickstart on any cloud VM with Trusted Launch | TPM 2.0 | Development / staging |
Most examples are fully runnable with no external dependencies: they ship a mock upstream MCP server, an agent script, an attested tool catalog, and a Cedar policy bundle, and end by printing the signed TRACE Trust Record for the session. The trace-output/ files are captured from real runs. The ca2a-delegation/ and embodied-action-receipts/ examples are offline verifiers and ship their captured chains instead.
git clone https://github.com/agentrust-io/examples.git
cd examples/startup-tpm
pip install cmcp-runtime httpx
# Terminal 1: mock upstream MCP server
python server/mock_mcp_server.py
# Terminal 2: the runtime (CMCP_DEV_MODE=1 for machines without a TPM/TEE)
CMCP_DEV_MODE=1 cmcp start --config cmcp-config.yaml
# Terminal 3: one tool call + signed TRACE Trust Record
python agent/echo_agent.pySee startup-tpm/README.md for the full walkthrough.
- Python 3.11+
- An MCP server to protect (existing servers work unchanged)
- For Level 1 attestation: a VM with TPM 2.0, AMD SEV-SNP, or Intel TDX
- For GPU-CC attestation (v0.2): NVIDIA H100/H200 with CC mode enabled
Launching at Confidential Computing Summit, San Francisco, June 23 2026.
Questions, feedback, integration help: Discord.
Apache 2.0