mkdocs.yml

site_name: cMCP
site_description: "Govern routed MCP tool calls with Cedar policy and signed TRACE session records. Start in software mode; evaluate hardware provenance separately."
site_url: https://cmcp.agentrust-io.com
repo_url: https://github.com/agentrust-io/cmcp
repo_name: agentrust-io/cmcp
edit_uri: edit/main/docs/
docs_dir: docs
exclude_docs: |
  .github/
  node_modules/
  benchmarks/
  src/
  tests/
  Dockerfile
  docker-compose.yml
  LICENSE
  NOTICE
  ANTITRUST.md
  ADOPTERS.md
  MAINTAINERS.md
  SECURITY.md
  CHARTER.md
  CODE_OF_CONDUCT.md
  pyproject.toml
  .gitignore

theme:
  name: material
  custom_dir: overrides
  font: false
  logo: assets/icon.svg
  favicon: assets/icon.svg
  palette:
    - scheme: default
      primary: custom
      accent: custom
      toggle:
        icon: material/brightness-4
        name: Switch to dark mode
    - scheme: slate
      primary: custom
      accent: custom
      toggle:
        icon: material/brightness-7
        name: Switch to light mode
  features:
    - navigation.instant
    - navigation.tracking
    - navigation.tabs
    - navigation.tabs.sticky
    - navigation.sections
    - navigation.top
    - navigation.path
    - search.suggest
    - search.highlight
    - content.code.copy
    - content.tabs.link
    - toc.follow
    - header.autohide
  icon:
    repo: fontawesome/brands/github

plugins:
  - search
  - llmstxt:
      full_output: llms-full.txt
      markdown_description: >-
        cMCP is an open-source gateway for MCP tool-call policy enforcement.
        It evaluates routed calls against Cedar policy and signs session records.
        Software mode demonstrates policy and signature checks without hardware
        provenance. Hardware deployments require provider-specific attestation
        verification, trusted inputs, and a deployment that prevents gateway bypass.
        The agent, model, and upstream tool server remain separate components.
      sections:
        Getting started:
          - index.md
          - quickstart.md
          - concepts.md
          - configuration.md
        Specification:
          - SPEC.md
          - spec/cedar-policy.md
          - spec/attestation.md
          - spec/threat-model.md
          - spec/verification-library.md
          - spec/embodied-action-evidence.md
        Tutorials:
          - tutorials/connecting-agent-frameworks.md
          - tutorials/cedar-policy-walkthrough.md
          - tutorials/verifying-a-trace-claim.md
          - tutorials/tee-attestation.md
  - minify:
      minify_html: true
  - mkdocstrings:
      default_handler: python
      handlers:
        python:
          paths: [src]
          options:
            docstring_style: google
            show_source: false
            show_root_heading: true
            show_root_full_path: false
            show_symbol_type_heading: true
            show_symbol_type_toc: true
            members_order: source
            separate_signature: true
            show_signature_annotations: true
            unwrap_annotated: true

markdown_extensions:
  - admonition
  - pymdownx.details
  - pymdownx.superfences:
      custom_fences:
        - name: mermaid
          class: mermaid
          format: !!python/name:pymdownx.superfences.fence_code_format
  - pymdownx.tabbed:
      alternate_style: true
  - pymdownx.highlight:
      anchor_linenums: true
  - pymdownx.inlinehilite
  - pymdownx.snippets:
      base_path: ["."]
      check_paths: true
  - pymdownx.emoji:
      emoji_index: !!python/name:material.extensions.emoji.twemoji
      emoji_generator: !!python/name:material.extensions.emoji.to_svg
  - attr_list
  - md_in_html
  - tables
  - toc:
      permalink: true

extra:
  social:
    - icon: fontawesome/brands/github
      link: https://github.com/agentrust-io/cmcp
  generator: false

extra_css:
  # Shared AgenTrust editorial design system. Deliberately the only stylesheet:
  # a local override here is how this site drifted to the Material default
  # violet last time. Change the shared file instead.
  - https://agentrust-io.com/design-system.css

nav:
  - Home: index.md
  - Quick Start: quickstart.md
  - Specification index: spec-index.md
  - How It Works: concepts.md
  - Configuration: configuration.md
  - Tutorials:
      - Try it from an existing MCP client: tutorials/existing-mcp-clients.md
      - Connecting agent frameworks: tutorials/connecting-agent-frameworks.md
      - Tool catalog authoring: tutorials/tool-catalog-authoring.md
      - Cedar policy walkthrough: tutorials/cedar-policy-walkthrough.md
      - Advisory mode debugging: tutorials/advisory-mode-debugging.md
      - TLS pinning: tutorials/tls-pinning.md
      - Verify a TRACE claim: tutorials/verifying-a-trace-claim.md
      - TEE attestation: tutorials/tee-attestation.md
      - Deploy on Azure: tutorials/deploy-azure.md
      - Deploy on GCP: tutorials/deploy-gcp.md
      - Multi-tenant deployment: tutorials/multi-tenant-config.md
      - Response inspection: tutorials/response-inspection.md
      - AGT SRE kill switch: tutorials/kill-switch.md
  - Specification:
      - Overview: SPEC.md
      - Component Model: spec/component-model.md
      - Cedar Policy: spec/cedar-policy.md
      - Attestation: spec/attestation.md
      - Transport: spec/transport.md
      - stdio Transport: spec/stdio-transport.md
      - Session Policy: spec/session-policy.md
      - Tool Identity: spec/tool-identity.md
      - Catalog Lifecycle: spec/catalog-lifecycle.md
      - Catalog Approval Provenance: spec/catalog-approval-provenance.md
      - Response Inspection: spec/response-inspection.md
      - Call Graph: spec/call-graph.md
      - Proxy Security: spec/proxy-security.md
      - Verification Library: spec/verification-library.md
      - Embodied Action Evidence: spec/embodied-action-evidence.md
      - Error Codes: spec/error-codes.md
      - Failure Modes: spec/failure-modes.md
      - Threat Model: spec/threat-model.md
      - TPM Security Model: spec/tpm-security-model.md
      - Policy Hot-Reload: spec/policy-hot-reload.md
      - Phase 2 Server: spec/phase2-server.md
  - Testing:
      - Benchmarks: testing/benchmarks.md
      - Soak Test: testing/soak-test.md
      - Hardware Validation: testing/hardware-validation.md
  - Project:
      - Limitations: limitations.md
      - Sponsors: sponsors.md
      - Changelog: https://github.com/agentrust-io/cmcp/blob/main/CHANGELOG.md
      - Contributing: https://github.com/agentrust-io/cmcp/blob/main/CONTRIBUTING.md
      - Governance: https://github.com/agentrust-io/cmcp/blob/main/GOVERNANCE.md
      - Roadmap: https://github.com/agentrust-io/cmcp/blob/main/ROADMAP.md

extra_javascript:
  # Shared cross-project top navigation (TRACE / Manifest / cMCP / cA2A / ...)
  - https://agentrust-io.com/supernav.js