DEV Community

Edison Flores
Edison Flores

Posted on

How to add trust verification to Continue.dev MCP servers

#continue #mcp #aiagents #security

How to add trust verification to Continue.dev MCP servers

Continue.dev loads MCP servers to help you code. But there's no trust verification.

What we built

@marketnow/trust-gateway wraps any MCP server with a pre-exec filter:

  • Blocks .env / .aws/credentials / .ssh/id_rsa reads
  • Blocks rm -rf, DROP TABLE, shell spawns
  • Logs every call to a tamper-evident Merkle tree
  • 12-stage fail-closed verification pipeline
  • 8 credential format support (ATC, JWT, W3C VC, A2A, EAT-AI, ZTA, MCP Card, X.509) 
npm install @marketnow/trust-gateway
Enter fullscreen mode Exit fullscreen mode

100% compatible with Continue.dev — no code changes needed.

Scanned 9,248 MCP servers: 0.3% malicious, 11% undocumented network access.

Repo: https://github.com/alicelabs-llc/universal-trust-adapter
— Edison Flores, AliceLabs LLC

Top comments (0)