Skip to content

Commit 1ddc31b

Browse files
Qiang-Xuimran-siddique
authored andcommitted
fix(doc): remove duplicate content
Signed-off-by: Qiang Xu <qiang@opaque.co>
1 parent bc8b624 commit 1ddc31b

1 file changed

Lines changed: 0 additions & 39 deletions

File tree

README.md

Lines changed: 0 additions & 39 deletions
Original file line numberDiff line numberDiff line change
@@ -276,45 +276,6 @@ TPM 2.0 / vTPM, AMD SEV-SNP, and Intel TDX, with NVIDIA GPU confidential computi
276276

277277
MIT.
278278

279-
<script type="application/ld+json">
280-
{
281-
"@context": "https://schema.org",
282-
"@type": "FAQPage",
283-
"mainEntity": [
284-
{
285-
"@type": "Question",
286-
"name": "What is cMCP?",
287-
"acceptedAnswer": { "@type": "Answer", "text": "cMCP (Confidential MCP Runtime) is an open-source gateway that enforces MCP tool-call policy inside a hardware Trusted Execution Environment. It intercepts each tool call, evaluates it against a Cedar policy bundle, enforces the decision (allow, deny, or redact), and records the call in a hardware-sealed audit chain." }
288-
},
289-
{
290-
"@type": "Question",
291-
"name": "How is cMCP different from software-only MCP governance?",
292-
"acceptedAnswer": { "@type": "Answer", "text": "Software-only governance runs the policy engine in the same OS an operator or a supply-chain CVE can reach, so it cannot prove the policy that ran was the approved one. cMCP runs the policy engine inside a TEE and measures the Cedar bundle hash into the hardware attestation report before any code runs, so the control plane cannot be reached by the process it governs." }
293-
},
294-
{
295-
"@type": "Question",
296-
"name": "Do I need special hardware to try cMCP?",
297-
"acceptedAnswer": { "@type": "Answer", "text": "No. Set CMCP_DEV_MODE=1 to use the software-only TEE provider and run the full quickstart without a hardware TEE. Hardware providers (TPM, AMD SEV-SNP, Intel TDX, OPAQUE) are used in production." }
298-
},
299-
{
300-
"@type": "Question",
301-
"name": "What is a TRACE Claim?",
302-
"acceptedAnswer": { "@type": "Answer", "text": "A TRACE Claim (a GatewayClaim) is a signed, hardware-attested artifact produced per session. It records which tools ran, which policy decided each call, the Cedar bundle hash, and the audit chain, and it is signed with an Ed25519 key that never leaves the TEE. A verifier checks it with the cmcp_verify library without trusting the operator." }
303-
},
304-
{
305-
"@type": "Question",
306-
"name": "Which TEE providers does cMCP support?",
307-
"acceptedAnswer": { "@type": "Answer", "text": "TPM 2.0 / vTPM, AMD SEV-SNP, and Intel TDX, with NVIDIA GPU confidential computing planned for v0.2 and OPAQUE Confidential Runtime available as explicit opt-in. Auto-detection order is Azure confidential VM, then TPM 2.0 / vTPM, then AMD SEV-SNP, then Intel TDX; the software-only provider is used only under CMCP_DEV_MODE=1." }
308-
},
309-
{
310-
"@type": "Question",
311-
"name": "What license is cMCP under?",
312-
"acceptedAnswer": { "@type": "Answer", "text": "MIT." }
313-
}
314-
]
315-
}
316-
</script>
317-
318279
---
319280

320281
## Contributing

0 commit comments

Comments
 (0)